HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
BID:47789
Info
HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 47789 |
| Class: | Unknown |
| CVE: |
CVE-2011-1848 CVE-2011-1849 CVE-2011-1850 CVE-2011-1851 CVE-2011-1852 CVE-2011-1853 CVE-2011-1854 |
| Remote: | Yes |
| Local: | No |
| Published: | May 10 2011 12:00AM |
| Updated: | May 10 2011 12:00AM |
| Credit: | Luigi Auriemma, AbdulAziz Hariri of ThirdEyeTesters, and TippingPoint |
| Vulnerable: |
HP Intelligent Management Center (IMC) 5.0_E0101L01 HP Intelligent Management Center (IMC) 5.0_E0101 3Com Intelligent Management Center (IMC) 3.3.9 R2 606 3Com Intelligent Management Center (IMC) 3.3 SP2 R2 606 3Com Intelligent Management Center (IMC) 3.3 SP1 R2 606 |
| Not Vulnerable: |
HP Intelligent Management Center (IMC) 5.0_E0101L02 |
Discussion
HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
HP Intelligent Management Center is prone to multiple remote code-execution vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise an affected computer.
HP Intelligent Management Center is prone to multiple remote code-execution vulnerabilities.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise an affected computer.
Exploit / POC
HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
References
HP Intelligent Management Center Multiple Remote Code Execution Vulnerabilities
References:
References:
- 3Com's iMC (Intelligent Management Centre) - Homepage (3Com)
- HP Homepage (HP)
- ZDI-11-160 HP 3COM/H3C Intelligent Management Center img Remote Code Execution V (Zero Day Initiative)
- ZDI-11-161 HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code (Zero Day Initiative)
- ZDI-11-162 HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code E (Zero Day Initiative)
- ZDI-11-163 HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code (Zero Day Initiative)
- ZDI-11-164 HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remot (Zero Day Initiative)
- ZDI-11-165 HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Rem (Zero Day Initiative)
- ZDI-11-166 HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Exe (Zero Day Initiative)