CVE-2015-6867
OpenText Vertica 7.1.1 - Unauthenticated Remote Code Execution via vertica-udx-zygote Process
Title source: llmDescription
The vertica-udx-zygote process in HP Vertica 7.1.1 UDx does not require authentication, which allows remote attackers to execute arbitrary commands via a crafted packet, aka ZDI-CAN-2914.
References (3)
Core 3
Core References
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-15-535/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/77405
Vendor Advisory x_refsource_confirm
https://h20566.www2.hpe.com/hpsc/doc/public/display?docId=emr_na-c04873095
Scores
EPSS
0.0471
EPSS Percentile
90.7%
Details
CWE
CWE-284
Status
published
Products (1)
opentext/vertica
7.1.1
Published
Nov 04, 2015
Tracked Since
Feb 18, 2026