PT-2016-5938 · Hewlett Packard · Hp System Management Homepage

Publicado 2016-10-28 · Atualizado 2017-02-17 · CVE-2016-4395

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6

Description The issue is related to a "Buffer Overflow" and allows remote attackers to have an unspecified impact. It is described as a Stack Buffer Overflow Remote Code Execution issue.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the HPE System Management Homepage until the update is applied.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-4395

ZDI-16-587

Produtos afetados

Hp System Management Homepage

Referências · 8

• https://osv.dev/vulnerability/CVE-2016-4395 · Aviso do Fabricante
• https://tenable.com/security/research/tra-2016-32 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-4395 · Nota de Segurança
• https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 · Aviso do Fabricante
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · Nota
• http://zerodayinitiative.com/advisories/ZDI-16-587 · Nota
• http://securityfocus.com/bid/93961 · Nota
• https://zerodayinitiative.com/advisories/ZDI-16-587 · Nota de Segurança