HP Performance Insight Remote Command Execution Vulnerability
BID:38611
Info
HP Performance Insight Remote Command Execution Vulnerability
| Bugtraq ID: | 38611 |
| Class: | Unknown |
| CVE: |
CVE-2010-0447 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 09 2010 12:00AM |
| Updated: | Mar 07 2011 05:48PM |
| Credit: | Anonymous researcher reported this issue to TippingPoint Zero Day Initiative |
| Vulnerable: |
HP OpenView Performance Insight 5.1.2 HP OpenView Performance Insight 5.1.1 HP OpenView Performance Insight 5.4 HP OpenView Performance Insight 5.2 HP OpenView Performance Insight 5.1 HP OpenView Performance Insight 5.0 HP HP Performance Insight 5.4 HP HP Performance Insight 5.3 |
| Not Vulnerable: | |
Discussion
HP Performance Insight Remote Command Execution Vulnerability
HP Performance Insight is prone to a remote command-execution vulnerability.
An attacker can exploit this issue to execute commands with SYSTEM-level privileges. Successful exploits will completely compromise affected computers.
HP Performance Insight is prone to a remote command-execution vulnerability.
An attacker can exploit this issue to execute commands with SYSTEM-level privileges. Successful exploits will completely compromise affected computers.
Exploit / POC
HP Performance Insight Remote Command Execution Vulnerability
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
HP Performance Insight Remote Command Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
HP Performance Insight Remote Command Execution Vulnerability
References:
References: