cve-2009-3843
Vulnerability from cvelistv5
Published
2009-11-24 00:00
Modified
2024-08-07 06:38
Severity ?
Summary
HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.
References
hp-security-alert@hp.comhttp://marc.info/?l=bugtraq&m=125873415424980&w=2
hp-security-alert@hp.comhttp://marc.info/?l=bugtraq&m=125873415424980&w=2
hp-security-alert@hp.comhttp://secunia.com/advisories/37444Vendor Advisory
hp-security-alert@hp.comhttp://securitytracker.com/id?1023222
hp-security-alert@hp.comhttp://www.osvdb.org/60317
hp-security-alert@hp.comhttp://www.zerodayinitiative.com/advisories/ZDI-09-085/
hp-security-alert@hp.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/54361
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=125873415424980&w=2
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=125873415424980&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/37444Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1023222
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/60317
af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-09-085/
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/54361
Impacted products
Vendor Product Version
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:38:30.345Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBMA02478",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-085/"
          },
          {
            "name": "operations-manager-unspecified-sec-bypass(54361)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54361"
          },
          {
            "name": "1023222",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1023222"
          },
          {
            "name": "SSRT090251",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
          },
          {
            "name": "37444",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/37444"
          },
          {
            "name": "60317",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/60317"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-11-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "HP Operations Manager 8.10 on Windows contains a \"hidden account\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "name": "HPSBMA02478",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-085/"
        },
        {
          "name": "operations-manager-unspecified-sec-bypass(54361)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54361"
        },
        {
          "name": "1023222",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1023222"
        },
        {
          "name": "SSRT090251",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
        },
        {
          "name": "37444",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/37444"
        },
        {
          "name": "60317",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/60317"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2009-3843",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "HP Operations Manager 8.10 on Windows contains a \"hidden account\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBMA02478",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
            },
            {
              "name": "http://www.zerodayinitiative.com/advisories/ZDI-09-085/",
              "refsource": "MISC",
              "url": "http://www.zerodayinitiative.com/advisories/ZDI-09-085/"
            },
            {
              "name": "operations-manager-unspecified-sec-bypass(54361)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/54361"
            },
            {
              "name": "1023222",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1023222"
            },
            {
              "name": "SSRT090251",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2"
            },
            {
              "name": "37444",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/37444"
            },
            {
              "name": "60317",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/60317"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2009-3843",
    "datePublished": "2009-11-24T00:00:00",
    "dateReserved": "2009-11-02T00:00:00",
    "dateUpdated": "2024-08-07T06:38:30.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:hp:operations_manager:8.10:*:windows:*:*:*:*:*\", \"matchCriteriaId\": \"94949E33-6ED5-4E91-ABBD-353285AC3EF9\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"HP Operations Manager 8.10 on Windows contains a \\\"hidden account\\\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.\"}, {\"lang\": \"es\", \"value\": \"HP Operations Manager v8.10 de Windows contiene una cuenta oculta en el fichero XML donde se especifican los usuarios de Tomcat, lo que permite a atacantes remotos realizar ataques de subida de ficheros sin restricci\\u00f3n, y por lo tanto ejecutar c\\u00f3digo de su elecci\\u00f3n, usando la clase org.apache.catalina.manager.HTMLManagerServlet para hacer peticiones a manager/html/upload.\"}]",
      "id": "CVE-2009-3843",
      "lastModified": "2024-11-21T01:08:18.653",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 10.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 10.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2009-11-24T00:30:00.420",
      "references": "[{\"url\": \"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"http://secunia.com/advisories/37444\", \"source\": \"hp-security-alert@hp.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1023222\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"http://www.osvdb.org/60317\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"http://www.zerodayinitiative.com/advisories/ZDI-09-085/\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361\", \"source\": \"hp-security-alert@hp.com\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://secunia.com/advisories/37444\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://securitytracker.com/id?1023222\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.osvdb.org/60317\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.zerodayinitiative.com/advisories/ZDI-09-085/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
      "sourceIdentifier": "hp-security-alert@hp.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2009-3843\",\"sourceIdentifier\":\"hp-security-alert@hp.com\",\"published\":\"2009-11-24T00:30:00.420\",\"lastModified\":\"2024-11-21T01:08:18.653\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"HP Operations Manager 8.10 on Windows contains a \\\"hidden account\\\" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.\"},{\"lang\":\"es\",\"value\":\"HP Operations Manager v8.10 de Windows contiene una cuenta oculta en el fichero XML donde se especifican los usuarios de Tomcat, lo que permite a atacantes remotos realizar ataques de subida de ficheros sin restricci\u00f3n, y por lo tanto ejecutar c\u00f3digo de su elecci\u00f3n, usando la clase org.apache.catalina.manager.HTMLManagerServlet para hacer peticiones a manager/html/upload.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":10.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:hp:operations_manager:8.10:*:windows:*:*:*:*:*\",\"matchCriteriaId\":\"94949E33-6ED5-4E91-ABBD-353285AC3EF9\"}]}]}],\"references\":[{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://secunia.com/advisories/37444\",\"source\":\"hp-security-alert@hp.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1023222\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.osvdb.org/60317\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://www.zerodayinitiative.com/advisories/ZDI-09-085/\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361\",\"source\":\"hp-security-alert@hp.com\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://marc.info/?l=bugtraq\u0026m=125873415424980\u0026w=2\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/37444\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://securitytracker.com/id?1023222\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.osvdb.org/60317\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.zerodayinitiative.com/advisories/ZDI-09-085/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://exchange.xforce.ibmcloud.com/vulnerabilities/54361\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.