CIA RESEARCH

Alerts

[CIA-1052-Alert] HP Openview Multiple Vulnerabilities

Summary:

HP Openview Network Node Manager and HP Openview Storage Data Protector are vulnerable to attacks that allow remote command execution.

Technical Details:

Sites running HP Opeview Version Storage Data Protector versions 5.1 and 5.5 should apply the security fix discussed in the HP Security Bulletin HPSBMA02121 SSRT061157 rev 1. Affected versions of HP Openview Storage Data Protector are vulnerable to command injection attacks.

Versions 6.20, 6.4X, 7.01, and 7.50 of HP Network Node manager were found to be vulnerable to attacks allowing unathorized access to the server, the ability to create arbitrary files, and command execution. Sites running affected versions should apply the security fix discussed in HPSBMA02098 SSRT5911 rev 1.

Solution:

In order to access the link below you will need to have an HP account.

HPSBMA02098 SSRT5911 rev 1

CVE Reference:

GENERIC-MAP-NOMATCH

SecurityTracker Number(s):

1016137

Vendor URL:

www.hp.com

About the Cenzic CIA Team:

Cenzic Intelligent Analysis (CIA) is Cenzic's research arm that focuses on continuous research for application vulnerabilities. Industry Research, Vulnerability assessment, penetration testing, and security testing - that's what Cenzic Intelligent Analysis Research is all about. Cenzic has dedicated experts whose sole job is to perform ongoing research to find not only common vulnerabilities but also vulnerabilities found in customer applications and make them available to our customers and to the community at large.

About Cenzic:

Cenzic provides Hailstorm® the revolutionary enterprise software suite for automated application security assessment and compliance that allows corporations and government organizations to dramatically improve the security of commercial and custom applications. Hailstorm enables security experts, QA professionals, and developers to work together to assess, analyze, and remediate applications for security vulnerabilities, and verify compliance with security policies. Benefits include reduced security risk and liability, lower development and testing costs, and faster time-to-market. Cenzic's customers are currently in the financial services and e-marketplaces sectors. For more information visit www.cenzic.com or call 1-866-4-CENZIC