PT-2011-3957 · Hewlett Packard · Ovbbccb.Exe+2

Published 2011-07-01 · Updated 2017-08-29 · CVE-2011-2608

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP OpenView Performance Agent versions 4.70 and 5.0 HP Operations Agent versions 8.53, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 11.0 ovbbccb.exe version 6.20.50.0

Description The issue allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.

Recommendations For HP OpenView Performance Agent versions 4.70 and 5.0, update to a version that includes a fix for this issue. For HP Operations Agent versions 8.53, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 11.0, update to a version that includes a fix for this issue. For ovbbccb.exe version 6.20.50.0, update to a version that includes a fix for this issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-2608

Affected Products

Hp Openview Performance Agent

Hp Operations Agent

Ovbbccb.Exe

References · 7

• 🔥 http://securityfocus.com/bid/48481 · Exploit
• 🔥 http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-2608 · Security Note
• http://marc.info/?l=bugtraq&m=131188898632504&w=2 · Vendor Advisory
• http://secunia.com/advisories/45079 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68269 · Note
• http://securitytracker.com/id?1025715 · Note