HP Performance Center 11.52.x / 12.x < 12.53 Multiple Vulnerabilities
high Nessus Plugin ID 93811
Language:
New! Plugin Severity Now Using CVSS v3
The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
Synopsis
A software performance testing application installed on the remote Windows host is affected by multiple vulnerabilities.Description
The version of HP Performance Center installed on the remote Windows host is 11.52.x or 12.x prior to 12.53. It is, therefore, affected by multiple vulnerabilities :- An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied string prior to copying it to a stack-based buffer. An unauthenticated, remote attacker can exploit this to cause a stack-based buffer overflow, resulting in the execution of arbitrary code. (CVE-2016-4359)
- A flaw exists in the CSV import feature when handling file paths. An unauthenticated, remote attacker can exploit this to delete arbitrary files on the remote system. (CVE-2016-4360)
- A flaw exists in the magentservice.exe service that is triggered when handling malformed xdr_string fields in a series of service connection requests. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to crash the service, resulting in a denial of service condition.
(CVE-2016-4361)
- A flaw exists in the mchan.dll library due to improper parsing of malformed packets. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to crash the service, resulting in a denial of service condition. (CVE-2016-4384)
Solution
Upgrade to HP Performance Center version 12.53 or later.See Also
http://www.nessus.org/u?1dac9898
http://www.nessus.org/u?491a66db
https://www.tenable.com/security/research/tra-2016-16
Plugin Details
Severity: High
ID: 93811
File Name: hp_performance_center_12_53.nasl
Version: 1.9
Type: local
Agent: windows
Family: Windows
Published: 9/30/2016
Updated: 11/15/2018
Dependencies: hp_performance_center_installed.nbin
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9
Temporal Score: 6.7
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C
Temporal Vector: E:U/RL:OF/RC:C
CVSS v3
Risk Factor: High
Base Score: 8.6
Temporal Score: 7.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Temporal Vector: E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:hp:performance_center
Required KB Items: installed_sw/HP Performance Center
Exploit Ease: No known exploits are available
Patch Publication Date: 5/31/2016
Vulnerability Publication Date: 5/31/2016
Reference Information
CVE: CVE-2016-4359, CVE-2016-4360, CVE-2016-4361, CVE-2016-4384
HP: emr_na-c05157423, emr_na-c05278882, HPSBGN03609, HPSBGN03648, PSRT110020, PSRT110032, PSRT110230, SSRT102274
TRA: TRA-2016-16, TRA-2016-17, TRA-2016-26
ZDI: ZDI-16-363, ZDI-16-364