PT-2012-4601 · Hewlett Packard · Inodemngchecker.Exe+1

Luigi Auriemma · Publicado 2012-08-30 · Atualizado 2019-10-09 · CVE-2012-3254

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP iNode Management Center versions prior to iNode PC 5.1 E0304

Description The issue involves multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary code via crafted input. A specific example is a stack-based buffer overflow in iNodeMngChecker.exe when processing a crafted 0x0A0BF007 packet.

Recommendations For versions prior to iNode PC 5.1 E0304, update to iNode PC 5.1 E0304 or later to resolve the issue. As a temporary workaround, consider restricting access to the iNodeMngChecker.exe to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2012-3254

Produtos afetados

Inode Management Center

Inodemngchecker.Exe

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3254 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-12-163 · Nota
• http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473527 · Aviso do Fabricante