PT-2014-2872 · Hewlett Packard · Storevirtual Vsa+2

Published 2014-02-26 · Updated 2019-10-09 · CVE-2013-4841

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP StoreVirtual 4000 and StoreVirtual VSA Software versions prior to 11.0

Description The issue allows remote attackers to execute arbitrary code via unknown vectors. This is related to an unspecified vulnerability in dbd manager in LeftHand OS.

Recommendations For versions prior to 11.0, update to version 11.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the dbd manager component until a patch is available.

Fix

Related Identifiers

CVE-2013-4841

ZDI-14-051

Affected Products

Hp Storevirtual 4000

Lefthand Os

Storevirtual Vsa

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-4841 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03995204 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-14-051 · Security Note