HP Operations Agent Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	54362
Class:	Unknown
CVE:	CVE-2012-2019 CVE-2012-2020
Remote:	Yes
Local:	No
Published:	Jul 09 2012 12:00AM
Updated:	Oct 29 2012 09:20AM
Credit:	Luigi Auriemma working with the TippingPoint Zero Day Initiative
Vulnerable:	HP Performance Agent 5.0 HP Operations Agent 8.60 HP Operations Agent 11.01 HP Operations Agent 11.0
Not Vulnerable:

HP Operations Agent Multiple Remote Code Execution Vulnerabilities

HP Operations Agent is prone to multiple remote code-execution vulnerabilities.

Successfully exploiting these issues allow an attacker to execute arbitrary code with SYSTEM privileges.

HP Operations Agent Multiple Remote Code Execution Vulnerabilities

The following example exploits are available:

• /data/vulnerabilities/exploits/54362.rb
• /data/vulnerabilities/exploits/54362-1.rb

HP Operations Agent Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

HP Operations Agent Multiple Remote Code Execution Vulnerabilities

References:

• HP Homepage (HP)