ID CVE-2011-1854
Summary Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.
References
Vulnerable Configurations
  • cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:hp:intelligent_management_center:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
    cpe:2.3:a:hp:intelligent_management_center:5.0:e0101:*:*:*:*:*:*
  • cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
    cpe:2.3:a:hp:intelligent_management_center:5.0:e0101l01:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 09-10-2019 - 23:02)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 47789
hp
  • HPSBGN02680
  • SSRT100361
misc http://www.zerodayinitiative.com/advisories/ZDI-11-166/
sectrack 1025519
Last major update 09-10-2019 - 23:02
Published 13-05-2011 - 17:05
Last modified 09-10-2019 - 23:02
Back to Top