HP LoadRunner CVE-2013-2368 Unspecified Denial of Service Vulnerability

Bugtraq ID:	61436
Class:	Unknown
CVE:	CVE-2013-2368
Remote:	Yes
Local:	No
Published:	Jul 24 2013 12:00AM
Updated:	Sep 02 2013 12:10AM
Credit:	Andrea Micalizzi aka rgod working with the TippingPoint Zero Day Initiative
Vulnerable:	HP LoadRunner 9.52 HP LoadRunner 9.1 HP LoadRunner 9.0.0.0 HP LoadRunner 8.1.0.0 build 1735 HP LoadRunner 11.0 patch4 HP LoadRunner 11.0
Not Vulnerable:

HP LoadRunner CVE-2013-2368 Unspecified Denial of Service Vulnerability

HP LoadRunner is prone to an unspecified denial-of-service vulnerability.

A remote attacker can leverage this issue to crash the affected application, denying service to legitimate users.

Versions prior to HP LoadRunner 11.52 are vulnerable.

HP LoadRunner CVE-2013-2368 Unspecified Denial of Service Vulnerability

Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.

HP LoadRunner CVE-2013-2368 Unspecified Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP LoadRunner CVE-2013-2368 Unspecified Denial of Service Vulnerability

References:

• HP Homepage (HP)
  
• HP LoadRunner Homepage (HP)