CVE-2012-2020
HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in HP Operations Agent before 11.03.12 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1326.
Vulnerabilidad no especificada en HP Operations Agent antes de v3.11.12 permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos, también conocido como ZDI-CAN-1326.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Performance Agent. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the coda.exe process which listens on a random TCP port by default. The process trusts a value within a GET request as a size. It then proceeds to copy that many bytes of user-supplied data into a fixed-length buffer on the stack. Remote unauthenticated attackers can exploit this vulnerability by sending malformed message packets to the target, which could ultimately lead to arbitrary code execution under the context of the SYSTEM user.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2012-04-02 CVE Reserved
- 2012-07-11 CVE Published
- 2012-10-29 First Exploit
- 2024-09-16 CVE Updated
- 2024-11-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/22305 | 2012-10-29 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03397769 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | <= 11.0 Search vendor "Hp" for product "Operations Agent" and version " <= 11.0" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 7.36 Search vendor "Hp" for product "Operations Agent" and version "7.36" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.51 Search vendor "Hp" for product "Operations Agent" and version "8.51" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.51.102 Search vendor "Hp" for product "Operations Agent" and version "8.51.102" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.52 Search vendor "Hp" for product "Operations Agent" and version "8.52" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.53 Search vendor "Hp" for product "Operations Agent" and version "8.53" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60 Search vendor "Hp" for product "Operations Agent" and version "8.60" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.005 Search vendor "Hp" for product "Operations Agent" and version "8.60.005" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.006 Search vendor "Hp" for product "Operations Agent" and version "8.60.006" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.007 Search vendor "Hp" for product "Operations Agent" and version "8.60.007" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.7 Search vendor "Hp" for product "Operations Agent" and version "8.60.7" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.008 Search vendor "Hp" for product "Operations Agent" and version "8.60.008" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Operations Agent Search vendor "Hp" for product "Operations Agent" | 8.60.501 Search vendor "Hp" for product "Operations Agent" and version "8.60.501" | - |
Affected
| ||||||