HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

Bugtraq ID:	37867
Class:	Boundary Condition Error
CVE:	CVE-2009-3999
Remote:	Yes
Local:	No
Published:	Jan 19 2010 12:00AM
Updated:	Oct 21 2011 07:51AM
Credit:	HP
Vulnerable:	HP Power Manager 4.2.9 HP Power Manager 4.2.7 HP Power Manager 4.0Build11 HP Power Manager 4.0Build10 HP Power Manager 0
Not Vulnerable:	HP Power Manager 4.2.10

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

HP Power Manager is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied data.

An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete compromise of the affected computer. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This BID initially referenced CVE-2009-4000. This issue is now described in BID 37873.

Versions prior to Power Manager 4.2.10 are affected.

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/37867.rb

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

Solution:
The vendor has released updates and an advisory. Please see the references for details.

HP Power Manager 'formExportDataLogs' Buffer Overflow Remote Code Execution Vulnerability

References:

• HP Power Manager Homepage (HP)
  
• Release Notes for HP Power Manager v4.2.10 (Windows Management Server) (HP)
  
• Secunia Research: HP Power Manager 'formExportDataLogs' Buffer Overflow (Secunia Research)
  
• [security bulletin] HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Exec ([email protected])