Zero-Day Remote Code Execution Flaws in HP Products Revealed by ZDI
TippingPoint’s Zero Day Initiative (ZDI) has published a number of five advisories to reveal the existence of serious security holes that affect HP products. The vulnerabilities haven’t been addressed, but since the 180-day deadline appointed by ZDI expired, the flaws have been made public.
In August 2010, ZDI enforced its vulnerability disclosure deadline, giving vendors six months to patch up the bugs in their products before their details would be made available to users. It seems that experts from ZDI are not willing to make any exceptions, not even for the company that owns them.
The vulnerabilities in question refer to HP LeftHand Virtual SAN Appliance, HP Operations Agent for NonStop Server, HP Intelligent Management Center, HP iNode Management Center and HP Diagnostics Server.
