HP Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability
Publish Date: 21 lipca 2015
Severity: : Critical
CVE Kennungen: : CVE-2011-1854
Advisory Date: 21 lipca 2015
DESCRIPTION
Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004672
Trend Micro Deep Security DPI Rule Name: 1004672 - HP Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability
AFFECTED SOFTWARE AND VERSION:
- hp intelligent_management_center 5.0