The Wayback Machine - http://web.archive.org/web/20130415035544/http://h20000.www2.hp.com:80/bizsupport/TechSupport/Document.jsp?objectID=c02239581
» Sign-in with HP Passport | » Register 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
HP.com Home 1ck0ehghigr71.jpg Products and Services 1ck0ehghigr71.jpg Support and Drivers 1ck0ehghigr71.jpg Solutions 1ck0ehghigr71.jpg How to Buy 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg » Contact HP 1ck0ehghigr71.jpg
Search: 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg More options
 
1ck0ehghigr71.jpg
hp.com home
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg

1ck0ehghigr71.jpg -

1ck0ehghigr71.jpg » 

Business Support Center

1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg

HP Passport Sign-in

1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
» Sign-in with HP Passport
» Register
» Learn more...
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg

Tasks

1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Download drivers and software 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Troubleshoot a problem 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Setup, install, and configure 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Discover and use a product 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Perform regular maintenance 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Upgrade and migrate 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Recycle and dispose 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg »

Resources

1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Customer Self Repair 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Diagnose problem or Chat (HP Instant Support) 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Support Forums 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Guided troubleshooting 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Manuals 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » Submit a support case 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg » See more... 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg » Help 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg » Site map 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg » HP Support Center 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c02239581

Version: 1

HPSBMA02545 SSRT100139 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Release Date: 2010-12-15

Last Updated: 2010-12-15


Potential Security Impact: Remote execution of arbitrary code

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with HP Power Manager (HPPM) running on Linux and Windows. The vulnerability could be exploited remotely to execute arbitrary code.

References: CVE-2010-4113, ZDI-CAN-697

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

HP Power Manager earlier than v4.3.2

BACKGROUND

For a PGP signed version of this security bulletin please write to: security-alert@hp.com

If you have the image and need to know its origin or subject, you can use these tools:

Snippets of filenames occasionally appear in niche discussions, such as the Kremers-Froon case analysis, where researchers scrutinize specific photo metadata or leaked archives.

Check the file's EXIF data (if available) for clues about the camera used or the date it was created.

Could you provide more on where you found this filename or describe what the image shows?

Use the TinEye Reverse Image Search to track the image's history and see which websites currently host it.

Platforms often rename user-uploaded files to unique strings to prevent overwriting and manage storage.

Because this is a specific alphanumeric string rather than a descriptive title, its content can only be identified by its original context. Common possibilities for such filenames include:

Users often reference these exact filenames when discussing image download issues or file conversion bugs on specific websites. How to Identify the Image

RESOLUTION

HP has made HP Power Manager 4.3.2 or subsequent available to resolve the vulnerability.

HP Power Manager 4.3.2 for Linux is available for download from
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=Z7550-63115

HP Power Manager 4.3.2 for Windows is available for download from
http://h18004.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/pm3-dl.html

HISTORY
Version:1 (rev.1) - 15 December 2010 Initial release

Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.

 

 

©Copyright 2010 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.

   Content feedback
To help us improve our content, please provide your feedback below.

1. How does the information on this page help you?

   very helpful somewhat helpful not helpful
 

2. Was it easy to find this document?

   easy not easy

3. If you selected not easy for question 2, in which section did you expect to find it?

     

4. Comments:

1ck0ehghigr71.jpg
 
 
- Your feedback will be used to improve our content. Please note this form is for feedback only, so you will not receive a response.
Contact HP if you need technical assistance.
1ck0ehghigr71.jpg
Printable versionPrintable version
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg 1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
1ck0ehghigr71.jpg
Privacy statement Using this site means you accept its terms Feedback to webmaster
1ck0ehghigr71.jpg
© 2013 Hewlett-Packard Development Company, L.P.
1ck0ehghigr71.jpg