Vulnerabilities > CVE-2011-1854 - Resource Management Errors vulnerability in HP Intelligent Management Center 5.0

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
hp
CWE-399
critical
nessus

Summary

Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.

Vulnerable Configurations

Part Description Count
Application
Hp
3

Common Weakness Enumeration (CWE)

Nessus

  • NASL familyWindows
    NASL idHP_INTELLIGENT_MANAGEMENT_CENTER_CODE_EXEC.NASL
    descriptionAccording to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the \
    last seen2020-06-01
    modified2020-06-02
    plugin id54628
    published2011-05-24
    reporterThis script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/54628
    titleHP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities
  • NASL familyGain a shell remotely
    NASL idHP_IMC_MULTIPLE_CODE_EXECUTION.NASL
    descriptionThe version of HP Intelligent Management Center running on the remote host contains a number of vulnerabilities that can be exploited remotely without authentication, including code execution and arbitrary file creation.
    last seen2020-06-01
    modified2020-06-02
    plugin id54999
    published2011-06-08
    reporterThis script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/54999
    titleHP Intelligent Management Center Multiple Vulnerabilities