HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
BID:48481
Info
HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
| Bugtraq ID: | 48481 |
| Class: | Configuration Error |
| CVE: |
CVE-2011-2608 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2011 12:00AM |
| Updated: | Jul 28 2011 06:10PM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
HP Operations Manager 8.1 HP Operations Agent 8.60.5 HP Operations Agent 8.60 HP Operations Agent 11.0 HP OpenView Performance Agent 5.0 HP OpenView Performance Agent 4.70 |
| Not Vulnerable: | |
Discussion
HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
HP Operations Manager is prone to an arbitrary-file-deletion vulnerability.
An attacker can exploit this issue to delete arbitrary files on an affected computer. Successful exploits will result in a denial-of-service condition or the corruption of applications running on the affected computer.
HP Operations Manager is prone to an arbitrary-file-deletion vulnerability.
An attacker can exploit this issue to delete arbitrary files on an affected computer. Successful exploits will result in a denial-of-service condition or the corruption of applications running on the affected computer.
Exploit / POC
HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
HP Operations Manager 'Register' Request Arbitrary File Deletion Vulnerability
References:
References: