CVEvulnerability
CVE-2011-2608
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-20
Description
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.
Affected configurations
• hp openview performance agent 4.70
• hp openview performance agent 5.0
• hp operations agent 8.53
• hp operations agent 8.60.005
• hp operations agent 8.60.006
• hp operations agent 8.60.007
• hp operations agent 8.60.008
• hp operations agent 8.60.501
• hp operations agent 11.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=131188898632504&w=2 Vendor Advisory
- http://secunia.com/advisories/45079 Vendor Advisory
- http://securitytracker.com/id?1025715 securitytracker.com
- http://www.securityfocus.com/bid/48481 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68269 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=131188898632504&w=2 Vendor Advisory
- http://secunia.com/advisories/45079 Vendor Advisory
- http://securitytracker.com/id?1025715 securitytracker.com
- http://www.securityfocus.com/bid/48481 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68269 exchange.xforce.ibmcloud.com