HP.Operations.Manager.Server.Backdoor.Account.Code.Execution

Release Date Dec 17, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description This indicates an attack attempt against a code-execution vulnerability in HP Operations Manager. The vulnerability is caused by a hidden account in the vulnerable software that lets malicious users upload packages to the server.
Affected Products HP Operations Manager 8.1
Recommended Actions Upgrade to the latest version, available from the vendor's website.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-3843
Reference/s http://www.securityfocus.com/bid/37086 (BugTraq) http://www.zerodayinitiative.com/advisories/ZDI-09-085/

Fortinet