CVE-2011-0889

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2011-0889 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The original article can be found at: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02750690

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2011-0889

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* HP Client Automation v5.11
* HP Client Automation v7.2
* HP Client Automation v7.5
* HP Client Automation v7.8
* HP Client Automation v7.9

HPCA was formerly known as Radia Notify. This vulnerability could be exploited to allow execution of arbitrary code.

The vulnerability is caused by a non standard configuration and can be resolved by verifying configuration of HP Client Automation Enterprise software (HPCA). Follow the advice from the article for Notify Security, KM99956.

Patch Availability:
Documentation for this resolution (KM99956) is available from the HP Software Support Online portal at:
http://support.openview.hp.com/selfsolve/document/KM99956

CVE Information:
CVE-2011-0889

Disclosure Timeline:
Release Date: 2011-03-14
Last Updated: 2011-03-14

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus