HP OpenView Performance Insight Server Backdoor Account

Added: 03/03/2011 CVE: CVE-2011-0276 BID: 46079 OSVDB: 70754 Background HP OpenView Performance Insight OVPI Server is a management utility that monitors and reports on the performance of services. Problem A backdoor account may allow an attacker to execute arbitrary code on the system. Resolutio...

HP OpenView Performance Insight Server Backdoor Account Code Execution (CVE-2011-0276)

HP OpenView Performance Insight OVPI implements service level management by monitoring the systems, networks and applications making up a service. It collects, analyzes and summarizes management data from various sources. A remote code execution vulnerability has been reported in HP OpenView...

HP OpenView NNM nnmRptconfig.exe schdParams and nameParams Buffer Overflow (CVE-2011-0267)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in the HP OpenView...

HP OpenView Network Node Manager ovutil.dll stringToSeconds Buffer Overflow (CVE-2011-0262)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

HP OpenView NNM nnmRptConfig.exe Template Format String Code Execution (CVE-2011-0270)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A format string vulnerability has been reported in HP OpenView Network...

HP OpenView NNM nnmRptConfig.exe schd_select1 Remote Code Execution (CVE-2011-0269)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in the HP OpenView...

HP OpenView Network Node Manager nnmRptConfig.exe Buffer Overflow (CVE-2011-0268)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

HP OpenView Performance Insight Server backdoor

Hidden undocumented user account is implemented in com.trinagy.security.XMLUserManager class...

ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability

ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-034 January 31, 2011 -- CVE ID: CVE-2011-0276 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

[security bulletin] HPSBMA02627 SSRT090246 rev.1 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02695453 Version: 1 HPSBMA02627 SSRT090246 rev.1 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upo...

HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability

HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. OpenVAS Vulnerability Test $Id:...

HP OpenView Performance Insight Server 'doPost()' Remote Arbitrary Code Execution Vulnerability

HP OpenView Performance Insight Server is prone to a remote code-execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HP OpenView Performance Insight Detection (HTTP)

This host is running the HP OpenView Performance Insight Web interface. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

HP Performance Insight Detection

This host is running the HP OpenView Performance Insight Web interface. OpenVAS Vulnerability Test $Id: gbhpperformanceinsightdetect.nasl 6125 2017-05-15 09:03:42Z teissa $ HP Performance Insight Detection Authors: Michael Meyer Copyright: Copyright c 2011 Greenbone Networks GmbH This program is...

CVE-2011-0276

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

Authentication flaw

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

HP OpenView Performance Insight Server Backdoor Account

Nessus was able to log into the remote HP OpenView Performance Insight system using a hidden account. The 'hch908v' user, hard-coded in the 'com.trinagy.security.XMLUserManager' class, is hidden and has administrative privileges. A remote attacker could exploit this by logging in as the hidden us...

CVE-2011-0276

HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class...

HP OpenView Performance Insight Server Detection

The web interface for HP OpenView Performance Insight was detected on the remote host. This software helps assess the availability and performance of network services. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51849; scriptversion"1.7"; scriptcvsdate"Date:...

CVE-2011-0276

HP OpenView Performance Insight Server (OVPI) versions 5.2, 5.3, 5.31, 5.4, and 5.41 are affected by a remote code execution vulnerability due to a hidden account in the com.trinagy.security.XMLUserManager Java class. The vulnerability allows an attacker to trigger the doPost() method of com.trin...