90975

1036006

https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c05157423

https://www.tenable.com/security/research/tra-2016-26

The version of HP Performance Center installed on the remote Windows host is 11.52.x or 12.x prior to 12.53. It is, therefore, affected by multiple vulnerabilities :

  - An overflow condition exists in mchan.dll due to a     failure to validate the size of a user-supplied string     prior to copying it to a stack-based buffer. An     unauthenticated, remote attacker can exploit this to     cause a stack-based buffer overflow, resulting in the     execution of arbitrary code. (CVE-2016-4359)   
  - A flaw exists in the CSV import feature when handling     file paths. An unauthenticated, remote attacker can     exploit this to delete arbitrary files on the remote     system. (CVE-2016-4360)   
  - A flaw exists in the magentservice.exe service that is     triggered when handling malformed xdr_string fields in a     series of service connection requests. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to crash the service,     resulting in a denial of service condition.
    (CVE-2016-4361)

  - A flaw exists in the mchan.dll library due to improper     parsing of malformed packets. An unauthenticated, remote     attacker can exploit this, via a specially crafted     request, to crash the service, resulting in a denial of     service condition. (CVE-2016-4384)

The version of HP LoadRunner installed on the remote Windows host is 11.52, 12.00, 12.01, 12.02, or 12.50, without the HPSBGN03609 hotfix.
It is, therefore, affected by multiple vulnerabilities :

  - An overflow condition exists in mchan.dll due to a     failure to validate the size of a user-supplied string     prior to copying it to a stack-based buffer. An     unauthenticated, remote attacker can exploit this to     cause a stack-based buffer overflow, resulting in the     execution of arbitrary code. (CVE-2016-4359)   
  - A flaw exists in the CSV import feature when handling     file paths. An unauthenticated, remote attacker can     exploit this to delete arbitrary files on the remote     system. (CVE-2016-4360)   
  - A flaw exists in the magentservice.exe service that is     triggered when handling malformed xdr_string fields in a     series of service connection requests. An     unauthenticated, remote attacker can exploit this, via a     specially crafted request, to crash the service,     resulting in a denial of service condition.
    (CVE-2016-4361)

ID	Name	Product	Family	Severity
93811	HP Performance Center 11.52.x / 12.x < 12.53 Multiple Vulnerabilities	Nessus	Windows	high
91571	HP LoadRunner 11.52 / 12.00 / 12.01 / 12.02 / 12.50 Multiple Vulnerabilities	Nessus	Windows	critical

CVE-2016-4361

high

Tenable Plugins

high

critical