HP System Management Homepage (CVE-2011-1540) Remote Code Execution Vulnerability

Bugtraq ID:	47507
Class:	Unknown
CVE:	CVE-2011-1540
Remote:	Yes
Local:	No
Published:	Apr 20 2011 12:00AM
Updated:	Dec 03 2011 12:56AM
Credit:	HP
Vulnerable:	HP System Management Homepage 6.0 .96 HP System Management Homepage 6.2.0-12 HP System Management Homepage 6.2 HP System Management Homepage 6.2 HP System Management Homepage 6.1.0.103 HP System Management Homepage 6.1.0.102 HP System Management Homepage 6.1.0-103 HP System Management Homepage 6.1 HP System Management Homepage 6.0.0.95 HP System Management Homepage 6.0.0-95 HP System Management Homepage 6.0 HP System Management Homepage 0
Not Vulnerable:	HP System Management Homepage 6.3

HP System Management Homepage (CVE-2011-1540) Remote Code Execution Vulnerability

HP System Management Homepage is prone to a remote code-execution vulnerability.

An remote authenticated attacker can exploit this issue to execute arbitrary code with administrative privileges. Successfully exploiting this issue will result in the complete compromise of affected computer.

HP System Management Homepage for Linux (x86) prior to v6.3
HP System Management Homepage for Linux (AMD64/EM64T) prior to v6.3
HP System Management Homepage for Windows prior to v6.3

HP System Management Homepage (CVE-2011-1540) Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP System Management Homepage (CVE-2011-1540) Remote Code Execution Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for details.

HP System Management Homepage (CVE-2011-1540) Remote Code Execution Vulnerability

References:

• HP Homepage (HP)