Lucene search
Tenable Network SecurityZDI-13-169HistoryJul 26, 2013 - 12:00 a.m.
Hewlett-Packard LoadRunner Stack Buffer Overflow Remote Code Execution Vulnerability
2013-07-2600:00:00
Tenable Network Security
www.zerodayinitiative.com
17
EPSS
0.97
Percentile
99.7%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LoadRunner. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of connections using SSL. The issue lies in the failure to validate the length of data before copying it into a fixed-size buffer. An attacker can leverage this vulnerability to gain code execution as SYSTEM.
Related
openvas
openvas
HPE LoadRunner 'magentproc.exe' Stack Buffer Overflow Vulnerability
2017-02-03 00:00:00
nvd
nvd
CVE-2013-4800
2013-07-29 13:59:14
zdt
zdt
HP LoadRunner magentproc.exe Overflow Vulnerability
2013-10-08 00:00:00
prion
prion
Code injection
2013-07-29 13:59:00
metasploit
metasploit
HP LoadRunner magentproc.exe Overflow
2013-10-03 21:52:20
packetstorm
packetstorm
HP LoadRunner magentproc.exe Overflow
2013-10-07 00:00:00
exploitdb
exploitdb
HP LoadRunner - 'magentproc.exe' Remote Overflow (Metasploit)
2013-10-08 00:00:00
nessus
nessus
HP LoadRunner < 11.52 SSL Connection Handling Stack Buffer Overflow RCE
2013-08-15 00:00:00
Mercury LoadRunner Agent server_ip_name Field Remote Buffer Overflow
2007-02-13 00:00:00
cvelist
cvelist
CVE-2013-4800
2013-07-26 18:00:00
checkpoint_advisories
checkpoint_advisories
HP LoadRunner magentproc.exe Stack Buffer Overflow (CVE-2013-4800)
2013-10-27 00:00:00
attackerkb
attackerkb
CVE-2013-4800 HP LoadRunner magentproc.exe Overflow
2013-07-29 00:00:00
cve
cve
CVE-2013-4800
2013-07-29 13:59:14
securityvulns
securityvulns