NVD

Id
12003  
Name
CVE-2010-0447  
Description
The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-03-10  
Modified Date
2010-03-26  
Seq
2010-0447  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
66267 12003 CVE-2010-0447 HPSBMA02489  View
66268 12003 CVE-2010-0447 20100309 ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability  View
66269 12003 CVE-2010-0447 38611  View
66270 12003 CVE-2010-0447 ADV-2010-0555  View
66271 12003 CVE-2010-0447 http://www.zerodayinitiative.com/advisories/ZDI-10-026  View
66272 12003 CVE-2010-0447 hp-performance-unspec-command-exec(56757)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38691 JVNDB-2010-004476 HP OVPI の Web サーバの helpmanager servlet における任意のコマンドを実行される脆弱性 HP OpenView Performance Insight (OVPI) の Web サーバの helpmanager servlet は、リクエストを適切に認証および検証をしないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2010-0447 43027 CVE-2010-0447 12003 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004476.html 2010-03-08 2012-09-25 View