PT-2016-5938 · Hewlett Packard · Hp System Management Homepage

Published 2016-10-28 · Updated 2017-02-17 · CVE-2016-4395

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6

Description The issue is related to a "Buffer Overflow" and allows remote attackers to have an unspecified impact. It is described as a Stack Buffer Overflow Remote Code Execution issue.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the HPE System Management Homepage until the update is applied.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-4395

ZDI-16-587

Affected Products

Hp System Management Homepage

References · 8

• https://osv.dev/vulnerability/CVE-2016-4395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-4395 · Security Note
• https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-16-587 · Security Note
• https://tenable.com/security/research/tra-2016-32 · Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · Note
• http://zerodayinitiative.com/advisories/ZDI-16-587 · Note
• http://securityfocus.com/bid/93961 · Note