CVE-2011-2608 ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers t...
MediumCVSS 6.4
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview performance agent | = 4.70 | No fix listed |
| HP Inc openview performance agent | = 5.0 | No fix listed |
| HP Inc operations agent | = 8.53 | No fix listed |
| HP Inc operations agent | = 8.60.005 | No fix listed |
| HP Inc operations agent | = 8.60.006 | No fix listed |
| HP Inc operations agent | = 8.60.007 | No fix listed |
| HP Inc operations agent | = 8.60.008 | No fix listed |
| HP Inc operations agent | = 8.60.501 | No fix listed |
| HP Inc operations agent | = 11.0 | No fix listed |
References
- aluigi.altervista.org exploit
- HPSBMU02691 vendor-advisory
- 45079 third-party-advisory vendor-advisory
- 1025715 vdb-entry
- 48481 exploit vdb-entry
- hp-operations-ovbbccb-file-deletion(68269) vdb-entry