CERTA-2010-AVI-317
Vulnerability from certfr_avis

De nombreuses vulnérabilités dans des produits HP Insight ont été corrigées, dont certaines permettant l'exécution de code arbitraire à distance.

Description

Plusieurs vulnérabilités dans des produits HP Insight ont été corrigées. Elles sont de natures différentes pouvant aller jusqu'à l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None
Impacted products
Vendor Product Description
N/A N/A HP Insight Manager 4.x, 5.X et 6.x ;
N/A N/A HP Insight Orchestration 6.x ;
N/A N/A HP Insight Control Suite For Linux(ICE-Linux) 2.x et 6.x.
N/A N/A HP Insight Software Integrated Installer 6.x ;
N/A N/A HP Virtual Connect Enterprise Manager 6.x ;
N/A N/A HP Insight Control 6.x ;

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "HP Insight Manager 4.x, 5.X et 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Insight Orchestration 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Insight Control Suite For Linux(ICE-Linux) 2.x et 6.x.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Insight Software Integrated Installer 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Virtual Connect Enterprise Manager 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    },
    {
      "description": "HP Insight Control 6.x ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s dans des produits HP Insight ont \u00e9t\u00e9 corrig\u00e9es.\nElles sont de natures diff\u00e9rentes pouvant aller jusqu\u0027\u00e0 l\u0027ex\u00e9cution de\ncode arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2009-3793",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3793"
    },
    {
      "name": "CVE-2010-2167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2167"
    },
    {
      "name": "CVE-2010-2173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2173"
    },
    {
      "name": "CVE-2010-1129",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1129"
    },
    {
      "name": "CVE-2010-2163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2163"
    },
    {
      "name": "CVE-2009-1524",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1524"
    },
    {
      "name": "CVE-2010-0090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0090"
    },
    {
      "name": "CVE-2010-0840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0840"
    },
    {
      "name": "CVE-2010-0846",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0846"
    },
    {
      "name": "CVE-2010-2170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2170"
    },
    {
      "name": "CVE-2008-5110",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-5110"
    },
    {
      "name": "CVE-2010-0844",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0844"
    },
    {
      "name": "CVE-2010-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0841"
    },
    {
      "name": "CVE-2010-0845",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0845"
    },
    {
      "name": "CVE-2010-2176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2176"
    },
    {
      "name": "CVE-2009-0692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-0692"
    },
    {
      "name": "CVE-2010-1967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1967"
    },
    {
      "name": "CVE-2010-0089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0089"
    },
    {
      "name": "CVE-2010-0847",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0847"
    },
    {
      "name": "CVE-2009-3555",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-3555"
    },
    {
      "name": "CVE-2010-2162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2162"
    },
    {
      "name": "CVE-2010-1968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1968"
    },
    {
      "name": "CVE-2010-2172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2172"
    },
    {
      "name": "CVE-2010-2181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2181"
    },
    {
      "name": "CVE-2010-1969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1969"
    },
    {
      "name": "CVE-2010-0843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0843"
    },
    {
      "name": "CVE-2010-2160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2160"
    },
    {
      "name": "CVE-2010-0839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0839"
    },
    {
      "name": "CVE-2010-0849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0849"
    },
    {
      "name": "CVE-2010-2179",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2179"
    },
    {
      "name": "CVE-2010-0093",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0093"
    },
    {
      "name": "CVE-2010-0848",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0848"
    },
    {
      "name": "CVE-2010-2165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2165"
    },
    {
      "name": "CVE-2010-2171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2171"
    },
    {
      "name": "CVE-2010-0092",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0092"
    },
    {
      "name": "CVE-2010-2182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2182"
    },
    {
      "name": "CVE-2010-1971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1971"
    },
    {
      "name": "CVE-2007-5497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-5497"
    },
    {
      "name": "CVE-2010-0085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0085"
    },
    {
      "name": "CVE-2010-0095",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0095"
    },
    {
      "name": "CVE-2010-2175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2175"
    },
    {
      "name": "CVE-2010-2180",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2180"
    },
    {
      "name": "CVE-2010-1970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1970"
    },
    {
      "name": "CVE-2008-4546",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-4546"
    },
    {
      "name": "CVE-2010-1297",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1297"
    },
    {
      "name": "CVE-2010-0091",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0091"
    },
    {
      "name": "CVE-2010-2187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2187"
    },
    {
      "name": "CVE-2010-2164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2164"
    },
    {
      "name": "CVE-2010-1965",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1965"
    },
    {
      "name": "CVE-2010-2161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2161"
    },
    {
      "name": "CVE-2010-0084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0084"
    },
    {
      "name": "CVE-2010-2178",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2178"
    },
    {
      "name": "CVE-2010-2177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2177"
    },
    {
      "name": "CVE-2010-2166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2166"
    },
    {
      "name": "CVE-2010-2184",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2184"
    },
    {
      "name": "CVE-2010-0088",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0088"
    },
    {
      "name": "CVE-2010-0842",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0842"
    },
    {
      "name": "CVE-2010-0837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0837"
    },
    {
      "name": "CVE-2010-2189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2189"
    },
    {
      "name": "CVE-2010-2174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2174"
    },
    {
      "name": "CVE-2010-2169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2169"
    },
    {
      "name": "CVE-2010-2188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2188"
    },
    {
      "name": "CVE-2010-2185",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2185"
    },
    {
      "name": "CVE-2010-0094",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0094"
    },
    {
      "name": "CVE-2010-0082",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0082"
    },
    {
      "name": "CVE-2010-0087",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0087"
    },
    {
      "name": "CVE-2007-2452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-2452"
    },
    {
      "name": "CVE-2010-2186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2186"
    },
    {
      "name": "CVE-2009-1523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2009-1523"
    },
    {
      "name": "CVE-2010-2183",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-2183"
    },
    {
      "name": "CVE-2010-0838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0838"
    },
    {
      "name": "CVE-2010-0850",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0850"
    },
    {
      "name": "CVE-2010-0001",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-0001"
    },
    {
      "name": "CVE-2010-1966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2010-1966"
    }
  ],
  "initial_release_date": "2010-07-16T00:00:00",
  "last_revision_date": "2010-07-16T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02550 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02550"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02551 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02551"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02554 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02554"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02548 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02548"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02549 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02549"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 HP HPSBMA02547 du 13 juillet 2010 :",
      "url": "http://itrc.hp.com/service/cki/docDisplay.do?docId=HPSBMA02547"
    }
  ],
  "reference": "CERTA-2010-AVI-317",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-07-16T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Injection de code indirecte \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De nombreuses vuln\u00e9rabilit\u00e9s dans des produits HP Insight ont \u00e9t\u00e9\ncorrig\u00e9es, dont certaines permettant l\u0027ex\u00e9cution de code arbitraire \u00e0\ndistance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans HP Insight",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletins de s\u00e9curit\u00e9 HP Insight",
      "url": null
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…