HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
BID:46079
Info
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 46079 |
| Class: | Design Error |
| CVE: |
CVE-2011-0276 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 31 2011 12:00AM |
| Updated: | Jun 14 2011 06:50PM |
| Credit: | Stephen Fewer of Harmony Security |
| Vulnerable: |
HP OpenView Performance Insight 5.4.1 HP OpenView Performance Insight 5.4 HP OpenView Performance Insight 5.3.1 HP OpenView Performance Insight 5.3 HP OpenView Performance Insight 5.2 |
| Not Vulnerable: | |
Discussion
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers.HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. Specifically, this issue occurs because of a hidden account present in the 'com.trinagy.security.XMLUserManager' Java class which allows attackers to access the 'com.trinagy.servlet.HelpManagerServlet' Java class. This class provides a 'doPost()' method which can be exploited by the attackers to upload malicious code on the server.
HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers.HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. Specifically, this issue occurs because of a hidden account present in the 'com.trinagy.security.XMLUserManager' Java class which allows attackers to access the 'com.trinagy.servlet.HelpManagerServlet' Java class. This class provides a 'doPost()' method which can be exploited by the attackers to upload malicious code on the server.
Exploit / POC
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following exploit code is available:
Solution / Fix
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability
References:
References:
- HP Homepage (HP)
- ZDI-11-034 (TippingPoint Zero Day Initiative)
- HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code (HP)