ID HP_OPS_MANAGERI_HPSBMU03042.NASL Type nessus Reporter Tenable Modified 2018-11-15T00:00:00
Description
The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.
#
# (C) Tenable Network Security, Inc.
#
include("compat.inc");
if (description)
{
script_id(74253);
script_version("1.5");
script_cvs_date("Date: 2018/11/15 20:50:27");
script_cve_id("CVE-2014-2607");
script_bugtraq_id(67570);
script_xref(name:"HP", value:"emr_na-c04296442");
script_xref(name:"IAVB", value:"2014-B-0064");
script_xref(name:"HP", value:"HPSBMU03042");
script_xref(name:"HP", value:"SSRT101575");
script_name(english:"HP Operations Manager i (OMi) 9.1 / 9.2 RCE");
script_summary(english:"Checks HP Operations Manager i version / build.");
script_set_attribute(attribute:"synopsis", value:
"The remote host has an operations management application installed
that is affected by an unspecified code execution vulnerability.");
script_set_attribute(attribute:"description", value:
"The HP Operations Manager i (OMi) installed on the remote host is
version 9.1 or 9.2. It is, therefore, affected by an unspecified code
execution vulnerability that allows an authenticated, remote attacker
to execute arbitrary code by leveraging the OMi operator role.");
# https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442
script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?87d5d6f0");
script_set_attribute(attribute:"see_also", value:"https://www.securityfocus.com/archive/1/532177/30/0/threaded");
script_set_attribute(attribute:"solution", value:"Apply the vendor-supplied patch.");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vuln_publication_date", value:"2014/05/20");
script_set_attribute(attribute:"patch_publication_date", value:"2014/05/20");
script_set_attribute(attribute:"plugin_publication_date", value:"2014/05/30");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/a:hp:operations_manager_i");
script_set_attribute(attribute:"stig_severity", value:"II");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Windows");
script_copyright(english:"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.");
script_dependencies("hp_operations_manager_i_installed.nbin");
script_require_keys("SMB/HP Operations Manager i/Version", "SMB/HP Operations Manager i/Build", "SMB/HP Operations Manager i/Path");
exit(0);
}
include("audit.inc");
include("global_settings.inc");
include("misc_func.inc");
version = get_kb_item_or_exit("SMB/HP Operations Manager i/Version");
build = get_kb_item_or_exit("SMB/HP Operations Manager i/Build");
path = get_kb_item_or_exit("SMB/HP Operations Manager i/Path");
build_parts = split(build, sep:'.', keep:FALSE);
disp_version = version + ' Build ' + version + '.' + build_parts[0];
fixed_version = '';
if (version =~ '^09\\.1[0-3]($|\\.)' && int(build_parts[0]) < 739)
fixed_version = '09.13 Build 09.13.739';
else if (version =~ '^09\\.2[0-4]($|\\.)' && int(build_parts[0]) < 51)
fixed_version = '09.24 Build 09.24.051';
else
audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);
port = get_kb_item("SMB/transport");
if (!port) port = 445;
if (report_verbosity > 0)
{
report +=
'\n Path : ' + path +
'\n Installed version : ' + disp_version +
'\n Fixed version : ' + fixed_version +
'\n';
security_hole(port:port, extra:report);
}
else security_hole(port);
{"id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "bulletinFamily": "scanner", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "published": "2014-05-30T00:00:00", "modified": "2018-11-15T00:00:00", "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "reporter": "Tenable", "references": ["https://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "cvelist": ["CVE-2014-2607"], "type": "nessus", "lastseen": "2018-11-16T17:12:05", "history": [{"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/a:hp:operations_manager_i"], "cvelist": ["CVE-2014-2607"], "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "edition": 3, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}}, "hash": "c3c9313f672aaae0abb8e96c2b758730440b5aabea42c4ccb8c569deae2c16b7", "hashmap": [{"hash": "e46631d5abc2a37db10405c4da10b59b", "key": "cpe"}, {"hash": "aea23489ce3aa9b6406ebb28e0cda430", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "87513246dda606a0d7e7d106724c82e9", "key": "references"}, {"hash": "61239ec595150d52e5d5d20357c61084", "key": "published"}, {"hash": "ffd226be408c83331061dd97cdc80352", "key": "cvss"}, {"hash": "858249cf2b3331f562c442eddbb2f441", "key": "title"}, {"hash": "cd475b95d0737f924f51d946435cd480", "key": "sourceData"}, {"hash": "32018cae4815b25a4f56c669bbd0150a", "key": "description"}, {"hash": "458670a522291e4895b3fba3ad1e3098", "key": "pluginID"}, {"hash": "66fdfef2b35e0ae77689b0b6ac6edc26", "key": "href"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f5e850f1985da305c7f9475708cd4d52", "key": "modified"}, {"hash": "b6bb6b92c673d2aa27d8c654fd90d04a", "key": "cvelist"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "lastseen": "2018-07-13T10:16:35", "modified": "2018-07-12T00:00:00", "naslFamily": "Windows", "objectVersion": "1.3", "pluginID": "74253", "published": "2014-05-30T00:00:00", "references": ["http://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/07/12 19:01:17\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "type": "nessus", "viewCount": 0}, "differentElements": ["cvss"], "edition": 3, "lastseen": "2018-07-13T10:16:35"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": [], "cvelist": ["CVE-2014-2607"], "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "edition": 1, "enchantments": {}, "hash": "856d2612a1458207ee6d6abdee456c4aa56d41d8af3e0083b20b905fc8753c20", "hashmap": [{"hash": "aea23489ce3aa9b6406ebb28e0cda430", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "87513246dda606a0d7e7d106724c82e9", "key": "references"}, {"hash": "61239ec595150d52e5d5d20357c61084", "key": "published"}, {"hash": "ffd226be408c83331061dd97cdc80352", "key": "cvss"}, {"hash": "858249cf2b3331f562c442eddbb2f441", "key": "title"}, {"hash": "32018cae4815b25a4f56c669bbd0150a", "key": "description"}, {"hash": "458670a522291e4895b3fba3ad1e3098", "key": "pluginID"}, {"hash": "66fdfef2b35e0ae77689b0b6ac6edc26", "key": "href"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "572531288da2e80cd4d3dd70d4f635e8", "key": "sourceData"}, {"hash": "b6bb6b92c673d2aa27d8c654fd90d04a", "key": "cvelist"}, {"hash": "399367e0138962a3ef7b1142fac65281", "key": "modified"}, {"hash": "d41d8cd98f00b204e9800998ecf8427e", "key": "cpe"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "lastseen": "2016-09-26T17:26:06", "modified": "2015-09-04T00:00:00", "naslFamily": "Windows", "objectVersion": "1.2", "pluginID": "74253", "published": "2014-05-30T00:00:00", "references": ["http://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"$Revision: 1.3 $\");\n script_cvs_date(\"$Date: 2015/09/04 19:55:21 $\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_osvdb_id(107247);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2015 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "type": "nessus", "viewCount": 0}, "differentElements": ["cpe"], "edition": 1, "lastseen": "2016-09-26T17:26:06"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/a:hp:operations_manager_i"], "cvelist": ["CVE-2014-2607"], "cvss": {"score": 0.0, "vector": "NONE"}, "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "edition": 4, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}}, "hash": "fab19cecd55c18e7bf7d597b3dca1192d5fa28931e773ea3f9af38c60397a630", "hashmap": [{"hash": "e46631d5abc2a37db10405c4da10b59b", "key": "cpe"}, {"hash": "aea23489ce3aa9b6406ebb28e0cda430", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "87513246dda606a0d7e7d106724c82e9", "key": "references"}, {"hash": "61239ec595150d52e5d5d20357c61084", "key": "published"}, {"hash": "858249cf2b3331f562c442eddbb2f441", "key": "title"}, {"hash": "cd475b95d0737f924f51d946435cd480", "key": "sourceData"}, {"hash": "32018cae4815b25a4f56c669bbd0150a", "key": "description"}, {"hash": "458670a522291e4895b3fba3ad1e3098", "key": "pluginID"}, {"hash": "8cd4821cb504d25572038ed182587d85", "key": "cvss"}, {"hash": "66fdfef2b35e0ae77689b0b6ac6edc26", "key": "href"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f5e850f1985da305c7f9475708cd4d52", "key": "modified"}, {"hash": "b6bb6b92c673d2aa27d8c654fd90d04a", "key": "cvelist"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "lastseen": "2018-08-30T19:53:45", "modified": "2018-07-12T00:00:00", "naslFamily": "Windows", "objectVersion": "1.3", "pluginID": "74253", "published": "2014-05-30T00:00:00", "references": ["http://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/07/12 19:01:17\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "type": "nessus", "viewCount": 0}, "differentElements": ["cvss"], "edition": 4, "lastseen": "2018-08-30T19:53:45"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/a:hp:operations_manager_i"], "cvelist": ["CVE-2014-2607"], "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "edition": 2, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}}, "hash": "3c96d13d2537a5034902365857bf723bbc93d8e53de75875549f794f0ac402cd", "hashmap": [{"hash": "e46631d5abc2a37db10405c4da10b59b", "key": "cpe"}, {"hash": "aea23489ce3aa9b6406ebb28e0cda430", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "87513246dda606a0d7e7d106724c82e9", "key": "references"}, {"hash": "61239ec595150d52e5d5d20357c61084", "key": "published"}, {"hash": "ffd226be408c83331061dd97cdc80352", "key": "cvss"}, {"hash": "858249cf2b3331f562c442eddbb2f441", "key": "title"}, {"hash": "32018cae4815b25a4f56c669bbd0150a", "key": "description"}, {"hash": "458670a522291e4895b3fba3ad1e3098", "key": "pluginID"}, {"hash": "66fdfef2b35e0ae77689b0b6ac6edc26", "key": "href"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "572531288da2e80cd4d3dd70d4f635e8", "key": "sourceData"}, {"hash": "b6bb6b92c673d2aa27d8c654fd90d04a", "key": "cvelist"}, {"hash": "399367e0138962a3ef7b1142fac65281", "key": "modified"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "lastseen": "2017-10-29T13:43:33", "modified": "2015-09-04T00:00:00", "naslFamily": "Windows", "objectVersion": "1.3", "pluginID": "74253", "published": "2014-05-30T00:00:00", "references": ["http://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"$Revision: 1.3 $\");\n script_cvs_date(\"$Date: 2015/09/04 19:55:21 $\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_osvdb_id(107247);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:ND/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2015 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "type": "nessus", "viewCount": 0}, "differentElements": ["modified", "sourceData"], "edition": 2, "lastseen": "2017-10-29T13:43:33"}, {"bulletin": {"bulletinFamily": "scanner", "cpe": ["cpe:/a:hp:operations_manager_i"], "cvelist": ["CVE-2014-2607"], "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "description": "The HP Operations Manager i (OMi) installed on the remote host is version 9.1 or 9.2. It is, therefore, affected by an unspecified code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary code by leveraging the OMi operator role.", "edition": 5, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}}, "hash": "c3c9313f672aaae0abb8e96c2b758730440b5aabea42c4ccb8c569deae2c16b7", "hashmap": [{"hash": "e46631d5abc2a37db10405c4da10b59b", "key": "cpe"}, {"hash": "aea23489ce3aa9b6406ebb28e0cda430", "key": "naslFamily"}, {"hash": "9cf00d658b687f030ebe173a0528c567", "key": "reporter"}, {"hash": "87513246dda606a0d7e7d106724c82e9", "key": "references"}, {"hash": "61239ec595150d52e5d5d20357c61084", "key": "published"}, {"hash": "ffd226be408c83331061dd97cdc80352", "key": "cvss"}, {"hash": "858249cf2b3331f562c442eddbb2f441", "key": "title"}, {"hash": "cd475b95d0737f924f51d946435cd480", "key": "sourceData"}, {"hash": "32018cae4815b25a4f56c669bbd0150a", "key": "description"}, {"hash": "458670a522291e4895b3fba3ad1e3098", "key": "pluginID"}, {"hash": "66fdfef2b35e0ae77689b0b6ac6edc26", "key": "href"}, {"hash": "bbdaea376f500d25f6b0c1050311dd07", "key": "bulletinFamily"}, {"hash": "5e0bd03bec244039678f2b955a2595aa", "key": "type"}, {"hash": "f5e850f1985da305c7f9475708cd4d52", "key": "modified"}, {"hash": "b6bb6b92c673d2aa27d8c654fd90d04a", "key": "cvelist"}], "history": [], "href": "https://www.tenable.com/plugins/index.php?view=single&id=74253", "id": "HP_OPS_MANAGERI_HPSBMU03042.NASL", "lastseen": "2018-09-02T00:03:43", "modified": "2018-07-12T00:00:00", "naslFamily": "Windows", "objectVersion": "1.3", "pluginID": "74253", "published": "2014-05-30T00:00:00", "references": ["http://www.securityfocus.com/archive/1/532177/30/0/threaded", "http://www.nessus.org/u?87d5d6f0"], "reporter": "Tenable", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"1.4\");\n script_cvs_date(\"Date: 2018/07/12 19:01:17\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"http://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "title": "HP Operations Manager i (OMi) 9.1 / 9.2 RCE", "type": "nessus", "viewCount": 0}, "differentElements": ["references", "modified", "sourceData"], "edition": 5, "lastseen": "2018-09-02T00:03:43"}], "edition": 6, "hashmap": [{"key": "bulletinFamily", "hash": "bbdaea376f500d25f6b0c1050311dd07"}, {"key": "cpe", "hash": "e46631d5abc2a37db10405c4da10b59b"}, {"key": "cvelist", "hash": "b6bb6b92c673d2aa27d8c654fd90d04a"}, {"key": "cvss", "hash": "ffd226be408c83331061dd97cdc80352"}, {"key": "description", "hash": "32018cae4815b25a4f56c669bbd0150a"}, {"key": "href", "hash": "66fdfef2b35e0ae77689b0b6ac6edc26"}, {"key": "modified", "hash": "015cb78ce50d3bd4e2fbe18f25603329"}, {"key": "naslFamily", "hash": "aea23489ce3aa9b6406ebb28e0cda430"}, {"key": "pluginID", "hash": "458670a522291e4895b3fba3ad1e3098"}, {"key": "published", "hash": "61239ec595150d52e5d5d20357c61084"}, {"key": "references", "hash": "123233905663650e3550f499e2ba55b1"}, {"key": "reporter", "hash": "9cf00d658b687f030ebe173a0528c567"}, {"key": "sourceData", "hash": "4d2c933f509fd92790546c713caff0be"}, {"key": "title", "hash": "858249cf2b3331f562c442eddbb2f441"}, {"key": "type", "hash": "5e0bd03bec244039678f2b955a2595aa"}], "hash": "d393a30cec76cf782452754b907aed12076e9a9be23ad096654d60bc0fdbd6b3", "viewCount": 0, "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(74253);\n script_version(\"1.5\");\n script_cvs_date(\"Date: 2018/11/15 20:50:27\");\n\n script_cve_id(\"CVE-2014-2607\");\n script_bugtraq_id(67570);\n script_xref(name:\"HP\", value:\"emr_na-c04296442\");\n script_xref(name:\"IAVB\", value:\"2014-B-0064\");\n script_xref(name:\"HP\", value:\"HPSBMU03042\");\n script_xref(name:\"HP\", value:\"SSRT101575\");\n\n script_name(english:\"HP Operations Manager i (OMi) 9.1 / 9.2 RCE\");\n script_summary(english:\"Checks HP Operations Manager i version / build.\");\n\n script_set_attribute(attribute:\"synopsis\", value:\n\"The remote host has an operations management application installed\nthat is affected by an unspecified code execution vulnerability.\");\n script_set_attribute(attribute:\"description\", value:\n\"The HP Operations Manager i (OMi) installed on the remote host is\nversion 9.1 or 9.2. It is, therefore, affected by an unspecified code\nexecution vulnerability that allows an authenticated, remote attacker\nto execute arbitrary code by leveraging the OMi operator role.\");\n # https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04296442\n script_set_attribute(attribute:\"see_also\", value:\"http://www.nessus.org/u?87d5d6f0\");\n script_set_attribute(attribute:\"see_also\", value:\"https://www.securityfocus.com/archive/1/532177/30/0/threaded\");\n script_set_attribute(attribute:\"solution\", value:\"Apply the vendor-supplied patch.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:U/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"No known exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"false\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2014/05/20\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2014/05/30\");\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:hp:operations_manager_i\");\n script_set_attribute(attribute:\"stig_severity\", value:\"II\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n\n script_copyright(english:\"This script is Copyright (C) 2014-2018 Tenable Network Security, Inc.\");\n\n script_dependencies(\"hp_operations_manager_i_installed.nbin\");\n script_require_keys(\"SMB/HP Operations Manager i/Version\", \"SMB/HP Operations Manager i/Build\", \"SMB/HP Operations Manager i/Path\");\n\n exit(0);\n}\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\n\nversion = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Version\");\nbuild = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Build\");\npath = get_kb_item_or_exit(\"SMB/HP Operations Manager i/Path\");\n\nbuild_parts = split(build, sep:'.', keep:FALSE);\ndisp_version = version + ' Build ' + version + '.' + build_parts[0];\n\nfixed_version = '';\nif (version =~ '^09\\\\.1[0-3]($|\\\\.)' && int(build_parts[0]) < 739)\n fixed_version = '09.13 Build 09.13.739';\nelse if (version =~ '^09\\\\.2[0-4]($|\\\\.)' && int(build_parts[0]) < 51)\n fixed_version = '09.24 Build 09.24.051';\nelse \n audit(AUDIT_INST_PATH_NOT_VULN, 'HP Operations Manager i', disp_version, path);\n\nport = get_kb_item(\"SMB/transport\");\nif (!port) port = 445;\n\nif (report_verbosity > 0)\n{\n report +=\n '\\n Path : ' + path +\n '\\n Installed version : ' + disp_version +\n '\\n Fixed version : ' + fixed_version + \n '\\n';\n security_hole(port:port, extra:report);\n}\nelse security_hole(port);\n", "naslFamily": "Windows", "pluginID": "74253", "cpe": ["cpe:/a:hp:operations_manager_i"]}
{"cve": [{"lastseen": "2016-09-03T20:17:03", "references": ["https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04296442"], "edition": 1, "description": "Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbitrary code by leveraging the OMi operator role.", "reporter": "NVD", "published": "2014-05-25T20:25:31", "enchantments": {"score": {"vector": "NONE", "value": 9.3}}, "title": "CVE-2014-2607", "type": "cve", "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2014-2607"], "scanner": [], "modified": "2014-07-16T14:38:17", "cpe": ["cpe:/a:hp:operations_manager_i:9.2", "cpe:/a:hp:operations_manager_i:9.1", "cpe:/a:hp:operations_manager_i:9.13", "cpe:/a:hp:operations_manager_i:9.23", "cpe:/a:hp:operations_manager_i:9.24", "cpe:/a:hp:operations_manager_i:9.12"], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-2607", "id": "CVE-2014-2607", "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "securityvulns": [{"lastseen": "2018-08-31T11:09:55", "references": ["https://vulners.com/securityvulns/securityvulns:doc:30775"], "description": "No description provided", "edition": 1, "reporter": "BUGTRAQ", "published": "2014-05-30T00:00:00", "title": "HP Operations Manager i code execution", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:09:55", "vector": "NONE", "value": 7.5}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "HP Operations Manager i", "version": "9.24", "operator": "eq"}], "cvelist": ["CVE-2014-2607"], "modified": "2014-05-30T00:00:00", "id": "SECURITYVULNS:VULN:13797", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:13797", "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-08-31T11:10:52", "references": [], "description": "\r\n\r\n-----BEGIN PGP SIGNED MESSAGE-----\r\nHash: SHA1\r\n\r\nNote: the current version of the following document is available here:\r\nhttps://h20564.www2.hp.com/portal/site/hpsc/public/kb/\r\ndocDisplay?docId=emr_na-c04296442\r\n\r\nSUPPORT COMMUNICATION - SECURITY BULLETIN\r\n\r\nDocument ID: c04296442\r\nVersion: 1\r\n\r\nHPSBMU03042 rev.1 - HP Operations Manager i, Execution of Arbitrary Code\r\n\r\nNOTICE: The information in this Security Bulletin should be acted upon as\r\nsoon as possible.\r\n\r\nRelease Date: 2014-05-20\r\nLast Updated: 2014-05-20\r\n\r\nPotential Security Impact: Execution of arbitrary code\r\n\r\nSource: Hewlett-Packard Company, HP Software Security Response Team\r\n\r\nVULNERABILITY SUMMARY\r\nA potential security vulnerability has been identified with HP Operations\r\nManager i running on Linux, and Windows. The vulnerability could be exploited\r\nby an authenticated OMi operator to execute arbitrary code.\r\n\r\nReferences: CVE-2014-2607, SSRT101575\r\n\r\nSUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.\r\nHP Operations Manager i v9.2 running on Linux and Windows\r\nHP Operations Manager i v9.1 running on Linux and Windows\r\n\r\nBACKGROUND\r\n\r\nCVSS 2.0 Base Metrics\r\n===========================================================\r\n Reference Base Vector Base Score\r\nCVE-2014-2607 (AV:N/AC:M/Au:S/C:C/I:C/A:C) 8.5\r\n===========================================================\r\n Information on CVSS is documented\r\n in HP Customer Notice: HPSN-2008-002\r\n\r\nRESOLUTION\r\n\r\nHP has provided patches to resolve the vulnerabilities for HP Operations\r\nManager i v9.2 and v9.1. The patches are available in HP Software Support\r\nOnline here: http://support.openview.hp.com/selfsolve/patches\r\n\r\nHP Operations Manager i v9.2 Service pack v9.2x\r\n\r\nFor Linux Service Pack v9.24 - OMI_00062\r\nFor Windows Service Pack v9.24 - OMI_00063\r\n\r\nHP Operations Manager i v9.1 Patch v9.13 (prerequisite: Service Pack v9.13)\r\n\r\nFor Linux OMI_00061\r\nFor Windows OMI_00060\r\n\r\nHISTORY\r\nVersion:1 (rev.1) - 20 May 2014 Initial release\r\n\r\nThird Party Security Patches: Third party security patches that are to be\r\ninstalled on systems running HP software products should be applied in\r\naccordance with the customer's patch management policy.\r\n\r\nSupport: For issues about implementing the recommendations of this Security\r\nBulletin, contact normal HP Services support channel. For other issues about\r\nthe content of this Security Bulletin, send e-mail to security-alert@hp.com.\r\n\r\nReport: To report a potential security vulnerability with any HP supported\r\nproduct, send Email to: security-alert@hp.com\r\n\r\nSubscribe: To initiate a subscription to receive future HP Security Bulletin\r\nalerts via Email:\r\nhttp://h41183.www4.hp.com/signup_alerts.php?jumpid=hpsc_secbulletins\r\n\r\nSecurity Bulletin Archive: A list of recently released Security Bulletins is\r\navailable here:\r\nhttps://h20564.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/\r\n\r\nSoftware Product Category: The Software Product Category is represented in\r\nthe title by the two characters following HPSB.\r\n\r\n3C = 3COM\r\n3P = 3rd Party Software\r\nGN = HP General Software\r\nHF = HP Hardware and Firmware\r\nMP = MPE/iX\r\nMU = Multi-Platform Software\r\nNS = NonStop Servers\r\nOV = OpenVMS\r\nPI = Printing and Imaging\r\nPV = ProCurve\r\nST = Storage Software\r\nTU = Tru64 UNIX\r\nUX = HP-UX\r\n\r\nCopyright 2014 Hewlett-Packard Development Company, L.P.\r\nHewlett-Packard Company shall not be liable for technical or editorial errors\r\nor omissions contained herein. The information provided is provided "as is"\r\nwithout warranty of any kind. To the extent permitted by law, neither HP or\r\nits affiliates, subcontractors or suppliers will be liable for\r\nincidental,special or consequential damages including downtime cost; lost\r\nprofits; damages relating to the procurement of substitute products or\r\nservices; or damages for loss of data, or software restoration. The\r\ninformation in this document is subject to change without notice.\r\nHewlett-Packard Company and the names of Hewlett-Packard products referenced\r\nherein are trademarks of Hewlett-Packard Company in the United States and\r\nother countries. Other product and company names mentioned herein may be\r\ntrademarks of their respective owners.\r\n\r\n-----BEGIN PGP SIGNATURE-----\r\nVersion: GnuPG v1.4.13 (GNU/Linux)\r\n\r\niEYEARECAAYFAlN7iBcACgkQ4B86/C0qfVneqQCdGjLfYJmc1spsq75LxmakSFac\r\nucIAn2ASA5n7d/1yjwtNVLXZxz6cs1vx\r\n=MFaI\r\n-----END PGP SIGNATURE-----\r\n\r\n", "edition": 1, "reporter": "Securityvulns", "published": "2014-05-30T00:00:00", "title": "[security bulletin] HPSBMU03042 rev.1 - HP Operations Manager i, Execution of Arbitrary Code", "type": "securityvulns", "enchantments": {"score": {"modified": "2018-08-31T11:10:52", "vector": "NONE", "value": 7.5}}, "bulletinFamily": "software", "affectedSoftware": [], "cvelist": ["CVE-2014-2607"], "modified": "2014-05-30T00:00:00", "id": "SECURITYVULNS:DOC:30775", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:30775", "cvss": {"score": 8.5, "vector": "AV:NETWORK/AC:MEDIUM/Au:SINGLE_INSTANCE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}]}
