NVD

Id
7397  
Name
CVE-2011-0276  
Description
HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a "hidden account" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-01  
Modified Date
2011-09-21  
Seq
2011-0276  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
41649 7397 CVE-2011-0276 SSRT090246  View
41650 7397 CVE-2011-0276 8136  View
41651 7397 CVE-2011-0276 16984  View
41652 7397 CVE-2011-0276 20110131 ZDI-11-034: HP OpenView Performance Insight Server Backdoor Account Code Execution Vulnerability  View
41653 7397 CVE-2011-0276 46079  View
41654 7397 CVE-2011-0276 1025014  View
41655 7397 CVE-2011-0276 ADV-2011-0258  View
41656 7397 CVE-2011-0276 http://www.zerodayinitiative.com/advisories/ZDI-11-034  View
41657 7397 CVE-2011-0276 openview-dopost-code-execution(65038)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33832 JVNDB-2011-004074 HP OpenView Performance Insight Server における任意のコードを実行される脆弱性 HP OpenView Performance Insight Server は、com.trinagy.security.XMLUserManager Java クラスに隠されたアカウントを含むため、任意のコードを実行される脆弱性が存在します。 CVE-2011-0276 48183 CVE-2011-0276 7397 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004074.html 2011-01-31 2012-03-27 View