Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

HP Intelligent Management Center User Access Manager < 5.0 E0101P03 Code Execution Vulnerability

Critical

Synopsis

The remote host has an application installed that is vulnerable to a code execution attack.

Description

Versions of HP Intelligent Management Center User Access Manager earlier than 5.0 E0101P03 are potentially affected by a code execution vulnerability in the 'iNOdeMngChecker.exe' component which listens by default on TCP port 9090 because the application fails to validate user supplied data when handling a '0x0A0BF007' packet type. A remote unauthenticated attacker, exploiting this flaw, could potentially execute arbitrary code on the remote host subject to the privileges of the user running the affected application.

Solution

Upgrade to HP Intelligent Management Center User Access Manager 5.0 E0101P03 or later.