HP Discovery and Dependency Mapping Inventory Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	37037
Class:	Unknown
CVE:	CVE-2009-3841
Remote:	Yes
Local:	No
Published:	Nov 16 2009 12:00AM
Updated:	Nov 18 2009 04:15PM
Credit:	Damian Frizza of Core Security Technologies
Vulnerable:	HP Discovery and Dependency Mapping Inventory 7.60 HP Discovery and Dependency Mapping Inventory 7.51 HP Discovery and Dependency Mapping Inventory 7.50 HP Discovery and Dependency Mapping Inventory 2.51 HP Discovery and Dependency Mapping Inventory 2.50
Not Vulnerable:

HP Discovery and Dependency Mapping Inventory Unspecified Remote Code Execution Vulnerability

HP Discovery and Dependency Mapping Inventory (DDMI) is prone to a remote code-execution vulnerability caused by an unspecified error.

An attacker can exploit this issue to execute arbitrary code in the context of the application, resulting in a complete compromise of the affected system.

The issue affects DDMI 2.5x, 7.5x, and 7.60 running on Windows.

HP Discovery and Dependency Mapping Inventory Unspecified Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Discovery and Dependency Mapping Inventory Unspecified Remote Code Execution Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.

HP Discovery and Dependency Mapping Inventory Unspecified Remote Code Execution Vulnerability

References:

• HP Power Manager Homepage (HP)
  
• HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI ([email protected])
  
• HPSBMA02456 SSRT090188 rev.1 - HP Discovery & Dependency Mapping Inventory (DDMI (HP)