PT-2015-6902 · Hewlett Packard · Hp Loadrunner Controller

Aniway · Published 2015-09-01 · Updated 2016-12-22 · CVE-2015-5426

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP LoadRunner Controller versions prior to 12.50

Description The issue allows local users to gain privileges via unknown vectors. It is also described as a remote code execution vulnerability due to a stack buffer overflow in scenario files.

Recommendations For versions prior to 12.50, update to version 12.50 or later to resolve the issue. As a temporary workaround, consider restricting access to scenario files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2015-5426

ZDI-15-408

Affected Products

Hp Loadrunner Controller

References · 5

• https://zerodayinitiative.com/advisories/ZDI-15-408 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-5426 · Security Note
• https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04692147 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-15-408 · Note
• http://securitytracker.com/id/1033561 · Note