PT-2016-5939 · Hewlett Packard · Hp System Management Homepage

Published 2016-10-28 · Updated 2017-02-17 · CVE-2016-4396

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.6

Description The issue is related to a "Buffer Overflow" problem, which allows remote attackers to have an unspecified impact. This is a remote code execution vulnerability.

Recommendations For versions prior to 7.6, update to version 7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-4396

ZDI-16-588

Affected Products

Hp System Management Homepage

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2016-4396 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-16-588 · Security Note
• https://h20564.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05320149 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4396 · Vendor Advisory
• https://tenable.com/security/research/tra-2016-32 · Note
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722 · Note
• http://zerodayinitiative.com/advisories/ZDI-16-588 · Note
• http://securityfocus.com/bid/93961 · Note