Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-2002

EPSS 2.94% · P87
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-2002

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The validateAdminConfig handler in the Analytics Management Console in HPE Vertica 7.0.x before 7.0.2.12, 7.1.x before 7.1.2-12, and 7.2.x before 7.2.2-1 allows remote attackers to execute arbitrary commands via the mcPort parameter, aka ZDI-CAN-3417.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HPE Vertica Analytics Management Console 任意命令执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HPE Vertica是美国惠普企业（Hewlett Packard Enterprise，HPE）公司的一套用于SQL数据库中的数据挖掘分析系统。Analytics Management Console是其中的一个分析管理控制台组件。 HPE Vertica的Analytics Management Console中的validateAdminConfig处理程序中存在安全漏洞。远程攻击者可借助‘mcPort’参数利用该漏洞执行任意命令。以下版本受到影响：HPE Vertica 7.0.2.12之前7.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-2002

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-2002

请登录查看更多情报信息。

Same Patch Batch · n/a · 2016-04-20 · 10 CVEs total

CVE-2016-0891EMC ViPR SRM 跨站请求伪造漏洞
CVE-2016-1384Cisco IOS和IOS XE Software ntp子系统安全漏洞
CVE-2016-2003HPE P9000 Command View Advanced Edition和XP7 CVAE 任意命令执行漏洞
CVE-2016-2202Symantec IT Management Suite Management Agent 安全漏洞
CVE-2014-9770systemd 安全漏洞
CVE-2015-7801OptiPNG 释放后重用漏洞
CVE-2015-7802OptiPNG gif2png 拒绝服务漏洞
CVE-2015-8842systemd 安全漏洞
CVE-2016-3628TIBCO Enterprise Message Service和EMS Appliance 缓冲区溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-2002

No comments yet

Leave a comment