SB2013042902 - Multiple vulnerabilities in HP Service Manager

Description

This security bulletin contains information about 5 secuirty vulnerabilities.

1) Input validation error (CVE-ID: CVE-2012-2733)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass a large amount of header data and perform a denial of service (DoS) attack.

2) Heap-based buffer overflow (CVE-ID: CVE-2012-3456)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import filter in Calligra 2.4.3 and earlier. A remote attacker can use a crafted ODF style in an ODF document. NOTE to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

3) Cross-site request forgery (CVE-ID: CVE-2012-4431)

The vulnerability allows a remote attacker to perform cross-site request forgery attacks.

The vulnerability exists due to insufficient validation of the HTTP request origin in the org/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat. A remote attacker can trick the victim to visit a specially crafted web page and perform arbitrary actions on behalf of the victim on the vulnerable website.

4) Resource management error (CVE-ID: CVE-2012-4534)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources in the org/apache/tomcat/util/net/NioEndpoint.java in Apache Tomcat. A remote attacker can pass specially crafted data and perform a denial of service (DoS) attack by terminating the connection during the reading of a response.

5) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2012-3546)

The vulnerability allows a remote attacker to modify data.

The vulnerability exists in the org/apache/catalina/realm/RealmBase.java in Apache Tomcat. A remote attacker can bypass security-constraint checks by leveraging a previous setUserPrincipal call and then placing /j_security_check at the end of a URI.

Remediation

Install update from vendor's website.

References

• https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c03748878