Description
radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial of service (reboot) by calling radbootw.exe or create arbitrary files by calling radcrecv.
References
- 20061108 TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability mailing-list
- 22780 third-party-advisory
- HPSBMA02167 vendor-advisory
- 1842 third-party-advisory
- ADV-2006-4410 vdb-entry
- hp-openview-radianotify-dos(30138) vdb-entry
- 1017197 vdb-entry