PT-2012-3734 · Hewlett Packard · Hp Openview Performance Agent+1

Published 2012-07-11 · Updated 2019-10-09 · CVE-2012-2019

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Operations Agent versions prior to 11.03.12

Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the HP OpenView Performance Agent and the coda.exe Opcode 0x34.

Recommendations For versions prior to 11.03.12, update to version 11.03.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the coda.exe module to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2012-2019

ZDI-12-114

Affected Products

Hp Openview Performance Agent

Hp Operations Agent

References · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_operations_agent_coda_34.rb · Exploit
• 🔥 https://exploit-db.com/exploits/22306 · Exploit
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-12-114 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-2019 · Security Note