CVE-2011-1854

HP Intelligent Management Center 5.0 - Remote Code Execution via Long Syslog Packet

Title source: manual
STIX 2.1

Description

Use-after-free vulnerability in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler.

References (4)

Core 4
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-11-166/
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025519
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/47789

Scores

EPSS 0.2434
EPSS Percentile 96.2%

Details

CWE
CWE-399
Status published
Products (1)
hp/intelligent_management_center 5.0 (3 CPE variants)
Published May 13, 2011
Tracked Since Feb 18, 2026