Pedram Amini has reported a vulnerability in HP OpenView Client Configuration Manager, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a vulnerable system.

The vulnerability is caused due to improper handling of data received by the Radia Notify Daemon (radexecd.exe). This can be exploited to upload and execute arbitrary files or restart the system by sending a specially crafted network packet to the daemon (default port 3465/TCP).

The vulnerability is reported in version 1.0. Prior versions may also be affected.

Solution
Upgrade to version 2.0.
Further details available in Customer Area

Provided and/or discovered by
Pedram Amini, TippingPoint Security Research Team.

Original Advisory
HPSBMA02167 SSRT061262:
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00795552

TippingPoint:
http://www.tippingpoint.com/security/advisories/TSRT-06-13.html

Deep Links
Links available in Customer Area