HPE Intelligent Management Center dbman Opcode 10008 Command Injection

This script is Copyright (C) 2017 Tenable Network Security, Inc.


Synopsis :

A network management system running on the remote host is affected
by a command injection vulnerability.

Description :

The HPE Intelligent Management Center (iMC) PLAT running on the remote
host is affected by a command injection vulnerability in the dbman
service due to improper validation of user-supplied input before
passing it to a system call. An unauthenticated, remote attacker can
exploit this, via a specially crafted opcode 10008 request, to inject
and execute arbitrary OS commands with SYSTEM or root privileges.

Note that the HP iMC dbman service running on the remote host is
reportedly affected by additional vulnerabilities; however, Nessus has
not tested for these.

See also :

http://www.nessus.org/u?3f1a2c3c
http://www.zerodayinitiative.com/advisories/ZDI-17-340/

Solution :

Upgrade the HPE iMC version to 7.3 E0504P04 or later.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Family: Misc.

Nessus Plugin ID: 100870 ()

Bugtraq ID: 98469

CVE ID: CVE-2017-5816

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now