Trend Micro Security

HP OpenView connectedNodes.ovpl Command Execution

2015年7月21日
  危険度: : 高
  CVE識別番号: CVE-2005-2773

  概要

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1000143
  Trend Micro Deep Security DPI Rule Name: 1000143 - HP OpenView connectedNodes.ovpl Command Execution

  影響を受けるソフトウェア

  • HP OpenView Network Node Manager 6.10
  • HP OpenView Network Node Manager 6.2
  • HP OpenView Network Node Manager 6.2 NT 4.X/Windows 2000
  • HP OpenView Network Node Manager 6.2 Solaris
  • HP OpenView Network Node Manager 6.31
  • HP OpenView Network Node Manager 6.31 NT 4.X/Windows 2000
  • HP OpenView Network Node Manager 6.4
  • HP OpenView Network Node Manager 6.4 NT 4.X/Windows 2000
  • HP OpenView Network Node Manager 6.4 Solaris
  • HP OpenView Network Node Manager 6.41
  • HP OpenView Network Node Manager 6.41 Solaris
  • HP OpenView Network Node Manager 7.0 1 Windows 2000/XP
  • HP OpenView Network Node Manager 7.50
  • HP OpenView Network Node Manager 7.50 Solaris
  • HP OpenView Network Node Manager 7.50 Windows 2000/XP