CVE-2011-1853

HP Intelligent Management Center 5.0 - Remote Code Execution via TFTP Opcode Handling

Title source: manual

Description

tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a (1) large or (2) invalid opcode field, related to a function pointer table.

References (4)

Core 4

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_hp

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1025519

Third Party Advisory x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-11-165/

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/47789

Scores

EPSS 0.1565

EPSS Percentile 94.8%

Details

CWE

CWE-20

Status published

Products (1)

hp/intelligent_management_center 5.0 (3 CPE variants)

Published May 13, 2011

Tracked Since Feb 18, 2026