PT-2014-2872 · Hewlett Packard · Storevirtual Vsa+2

Publicado 2014-02-26 · Atualizado 2019-10-09 · CVE-2013-4841

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP StoreVirtual 4000 and StoreVirtual VSA Software versions prior to 11.0

Description The issue allows remote attackers to execute arbitrary code via unknown vectors. This is related to an unspecified vulnerability in dbd manager in LeftHand OS.

Recommendations For versions prior to 11.0, update to version 11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the dbd manager component until a patch is available.

Correção

Identificadores relacionados

CVE-2013-4841

ZDI-14-051

Produtos afetados

Hp Storevirtual 4000

Lefthand Os

Storevirtual Vsa

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4841 · Nota de Segurança
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-14-051 · Nota de Segurança