CVE-2011-1849: Input Validation
Published May 13, 2011
·Updated
tftpserver.exe in HP Intelligent Management Center (IMC) 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request.
Affected Software
3 affected components
HP intelligent Management Center=5.0-e0101
HP intelligent Management Center=5.0
HP intelligent Management Center=5.0-e0101l01
Remediation
Event History
May 13, 2011
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1849?
CVE-2011-1849 has a high severity rating due to the potential for remote code execution.
2
How do I fix CVE-2011-1849?
To fix CVE-2011-1849, upgrade HP Intelligent Management Center to version 5.0 E0101 or later.
3
Who is affected by CVE-2011-1849?
Users of HP Intelligent Management Center versions 5.0 before E0101L02 are affected by CVE-2011-1849.
4
What types of attacks can be executed due to CVE-2011-1849?
CVE-2011-1849 allows remote attackers to create or overwrite files and execute arbitrary code.
5
What component is vulnerable in CVE-2011-1849?
The vulnerable component in CVE-2011-1849 is the tftpserver.exe in HP Intelligent Management Center.