HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability

Bugtraq ID:	45792
Class:	Unknown
CVE:	CVE-2011-0272
Remote:	Yes
Local:	No
Published:	Jan 13 2011 12:00AM
Updated:	Jan 18 2011 09:41PM
Credit:	AbdulAziz Hariri via ZDI
Vulnerable:	HP LoadRunner 9.52
Not Vulnerable:

HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability

HP LoadRunner is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

HP LoadRunner 9.52 is vulnerable; other versions may also be affected.

HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP LoadRunner 'magentproc.exe' Remote Code Execution Vulnerability

References:

• HP Homepage (HP)
  
• HP LoadRunner Homepage (HP)
  
• Vendor Advisory (HP)
  
• ZDI-11-015 HP Mercury Loadrunner Agent Remote Code Execution Vulnerability (Zero Day Initiative)