CVE-2011-2608

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-07-01 · updated 2026-06-16
Weakness: CWE-20

Description

ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.

Affected products

HP Openview Performance Agent: 4.70, 5.0
HP Operations Agent: 8.53, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501 (+1)

References

http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt
http://marc.info/?l=bugtraq&m=131188898632504&w=2
http://secunia.com/advisories/45079
http://securitytracker.com/id?1025715
http://www.securityfocus.com/bid/48481
https://exchange.xforce.ibmcloud.com/vulnerabilities/68269
http://aluigi.altervista.org/adv/ovbbccb_1-adv.txt
http://marc.info/?l=bugtraq&m=131188898632504&w=2
http://secunia.com/advisories/45079
http://securitytracker.com/id?1025715
http://www.securityfocus.com/bid/48481
https://exchange.xforce.ibmcloud.com/vulnerabilities/68269

Get alerted when CVE-2011-2608 or the next vulnerability affects your stack