Check Point Advisories

Update Protection against HP OpenView Operations Agent Blank 'opc_op' Password Vulnerability

Check Point Reference:	CPAI-2010-128
Date Published:	15 May 2010
Severity:	Critical
Last Updated:	Friday 01 January, 2010
Source:	Bugtraq ID: 38150
Industry Reference:	CVE-2010-0444
Protection Provided by:
Who is Vulnerable?	HP Operations Agent 8.51, 8.52, 8.53, 8.60
Vulnerability Description	A vulnerability has been reported in HP OpenView Operations Agent. the vulnerability can be exploited by a remote attacker to gain access to the target system and completely compromise an affected system.
Update/Patch Avaliable	The vendor has released a patch.
Vulnerability Details	TThe vulnerability is due to an access control weakness which permits the creation of an opc_op account without a password. A remote attacker can exploit this issue to completely compromise an affected system.