Arbitrary files deletion in HP OpenView Communication Broker

Luigi Auriemma Application: HP OpenView Communication Broker http://www8.hp.com/us/en/software/enterprise-software.html Versions: ovbbccb.exe = 11.0.43.0 Platforms: Windows, Linux, Solaris, HP-UX, AIX Bug: arbitrary files deletion Exploitation: remote, versus server Date: 27 Jun 2011 found 01 Jun...

HP OpenView Communication Broker arbitrary files deletion

Arbitrary files deletion via TCP/383 service...

Arbitrary files deletion in HP OpenView Performance Agent

Luigi Auriemma Application: HP OpenView Performance Agent http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-937022 Versions: ovbbccb.exe = 6.20.50.0 Platforms: Windows, Linux, Solaris, HP-UX, AIX Bug: arbitrary files deletion Exploitation: remote, versus server Date: 27 Jun...

HP OpenView Storage Data Protector multiple security vulnerabilities

Multiple vulnerabilities in TCP/5555 service...

[security bulletin] HPSBMU02686 SSRT100541 rev.3 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02872182 Version: 3 HPSBMU02686 SSRT100541 rev.3 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as...

CVE-2011-2608

ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command...

CVE-2011-1865

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...

CVE-2011-1866

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-1514

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request containing crafted parameters...

CVE-2011-1515

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

Design/Logic Flaw

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

Command injection

ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command...

Buffer overflow

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-1865

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...

CVE-2011-1866

HP OpenView Storage Data Protector 6.00–6.20 contains a remote code execution vulnerability in the inet service due to a buffer/boundary handling issue with EXEC_CMD messages. The root cause is insufficient boundary checking when processing EXEC_CMD, enabling an attacker to craft a request that e...

CVE-2011-1866

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-2608

ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command...

CVE-2011-1865

CVE-2011-1865 describes multiple stack-based buffer overflows in the inet service of HP OpenView Storage Data Protector 6.00–6.20, enabling remote code execution via crafted parameter requests. Publicly available exploit information (e.g., HP OmniInet exploits with opcode 20/27, and Metasploit mo...

CVE-2011-1515

HP Data Protector (OpenView Storage Data Protector) inet service vulnerability affecting versions 6.00–6.20 can be triggered by a crafted request to the data protector inet port (port 5555 per CoreLabs advisory) leading to denial of service (daemon exit) or remote code execution in some reports. ...

CVE-2011-1514

The CVE-2011-1514 weakness affects HP OpenView Storage Data Protector (HP Data Protector) 6.00–6.20, specifically the inet service. A crafted request can trigger a NULL pointer dereference causing a denial of service (daemon crash). Public sources also describe related issues (CVE-2011-1515, CVE-...