CVE-2011-1849 tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request.
HighCVSS 10.0
EPSS 10.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc intelligent management center | = 5.0 | No fix listed |
| HP Inc intelligent management center | = 5.0-e0101 | No fix listed |
| HP Inc intelligent management center | = 5.0-e0101l01 | No fix listed |
References
- HPSBGN02680 patch vendor-advisory
- 1025519 vdb-entry
- 47789 vdb-entry
- www.zerodayinitiative.com