int(6418)

Vulnerability Bulletins


Vulnerabilidades 0day en productos HP

Vulnerability classification

Property Value
Confidence level Probado
Impact Obtener acceso
Dificulty Experto
Required attacker level Acceso remoto sin cuenta a un servicio exotico

System information

Property Value
Affected manufacturer Comercial Software
Affected software HP LeftHand Virtual SAN
HP Operations Agent for NonStop
HP Intelligent Management Center
HP iNode Management Center
HP Diagnostics Server

Description

A través de la iniciativa Zero Day (ZDI), se han publicado cinco vulnerabilidades de dia 0 en productos HP, reportadas hace más de 6 meses.

En los cinco productos, atacantes remotos pueden explotar fallos de programacion para inyectar y ejecutar código arbitrario mediante solicitudes especialmente diseñadas.

Solution

HP aún no ha sacado ningún parche o actualización que solucione los problemas.

Standar resources

Property Value
CVE
BID

Other resources

ZDI-12-166. HP LeftHand Virtual SAN Appliance Unauthenticated Access Remote Command Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-166/

ZDI-12-165. HP Operations Agent for NonStop Server HEALTH Packet Parsing Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-165/

ZDI-12-164. HP Intelligent Management Center img.exe Integer Wrap Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-164/

ZDI-12-163: HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-163/

ZDI-12-162: HP Diagnostics Server magentservice.exe Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-162/

Información en la web de The H Security
http://www.h-online.com/security/news/item/Five-0days-HP-in-the-security-dock-1676337.html

Version history

Version Comments Date
1.0 Aviso emitido 2012-08-29