The Wayback Machine - http://web.archive.org/web/20130415035544/http://h20000.www2.hp.com:80/bizsupport/TechSupport/Document.jsp?objectID=c02239581
» Sign-in with HP Passport | » Register Library Unistd H Library Unistd H Library Unistd H
Library Unistd H
HP.com Home Library Unistd H Products and Services Library Unistd H Support and Drivers Library Unistd H Solutions Library Unistd H How to Buy Library Unistd H
Library Unistd H » Contact HP Library Unistd H
Search: Library Unistd H Library Unistd H
Library Unistd H Library Unistd H More options
 
Library Unistd H
hp.com home
Library Unistd H
Library Unistd H

Library Unistd H Apr 2026

Library Unistd H » 

Business Support Center

Library Unistd H
Library Unistd H
Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H
Library Unistd H

HP Passport Sign-in

Library Unistd H
Library Unistd H
Library Unistd H
» Sign-in with HP Passport
» Register
» Learn more...
Library Unistd H
Library Unistd H
Library Unistd H
Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H

Tasks

Library Unistd H
Library Unistd H Library Unistd H » Download drivers and software Library Unistd H
Library Unistd H Library Unistd H » Troubleshoot a problem Library Unistd H
Library Unistd H Library Unistd H » Setup, install, and configure Library Unistd H
Library Unistd H Library Unistd H » Discover and use a product Library Unistd H
Library Unistd H Library Unistd H » Perform regular maintenance Library Unistd H
Library Unistd H Library Unistd H » Upgrade and migrate Library Unistd H
Library Unistd H Library Unistd H » Recycle and dispose Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H »

Resources

Library Unistd H
Library Unistd H Library Unistd H » Customer Self Repair Library Unistd H
Library Unistd H Library Unistd H » Diagnose problem or Chat (HP Instant Support) Library Unistd H
Library Unistd H Library Unistd H » Support Forums Library Unistd H
Library Unistd H Library Unistd H » Guided troubleshooting Library Unistd H
Library Unistd H Library Unistd H » Manuals Library Unistd H
Library Unistd H Library Unistd H » Submit a support case Library Unistd H
Library Unistd H Library Unistd H » See more... Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H » Help Library Unistd H
Library Unistd H » Site map Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H » HP Support Center Library Unistd H
Library Unistd H Library Unistd H Library Unistd H Library Unistd H Library Unistd H
Library Unistd H
Library Unistd H
Library Unistd H
Library Unistd H
SUPPORT COMMUNICATION - SECURITY BULLETIN

Document ID: c02239581

Version: 1

HPSBMA02545 SSRT100139 rev.1 - HP Power Manager (HPPM) Running on Linux and Windows, Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.

Release Date: 2010-12-15

Last Updated: 2010-12-15


Potential Security Impact: Remote execution of arbitrary code

Source: Hewlett-Packard Company, HP Software Security Response Team

VULNERABILITY SUMMARY

A potential security vulnerability has been identified with HP Power Manager (HPPM) running on Linux and Windows. The vulnerability could be exploited remotely to execute arbitrary code.

References: CVE-2010-4113, ZDI-CAN-697

SUPPORTED SOFTWARE VERSIONS*: ONLY impacted versions are listed.

HP Power Manager earlier than v4.3.2

BACKGROUND

For a PGP signed version of this security bulletin please write to: security-alert@hp.com

: One of the most famous C functions; it literally "clones" your program into two identical processes running simultaneously.

Because is a Unix standard, it usually won't work on native Windows (which uses windows.h ). If you're building cross-platform apps, you'll often see code like this:

: Finds the "Current Working Directory" (where your program is sitting right now).

: Pauses execution for seconds or microseconds.

Useful for controlling how your program behaves in the background.

RESOLUTION

HP has made HP Power Manager 4.3.2 or subsequent available to resolve the vulnerability.

HP Power Manager 4.3.2 for Linux is available for download from
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=Z7550-63115

HP Power Manager 4.3.2 for Windows is available for download from
http://h18004.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/pm3-dl.html

HISTORY
Version:1 (rev.1) - 15 December 2010 Initial release

Third Party Security Patches: Third party security patches that are to be installed on systems running HP software products should be applied in accordance with the customer's patch management policy.

 

 

©Copyright 2010 Hewlett-Packard Development Company, L.P.
Hewlett-Packard Company shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental,special or consequential damages including downtime cost; lost profits;damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. Hewlett-Packard Company and the names of Hewlett-Packard products referenced herein are trademarks of Hewlett-Packard Company in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.

   Content feedback
To help us improve our content, please provide your feedback below.

1. How does the information on this page help you?

   very helpful somewhat helpful not helpful
 

2. Was it easy to find this document?

   easy not easy

3. If you selected not easy for question 2, in which section did you expect to find it?

     

4. Comments:

Library Unistd H
 
 
- Your feedback will be used to improve our content. Please note this form is for feedback only, so you will not receive a response.
Contact HP if you need technical assistance.
Library Unistd H
Printable versionPrintable version
Library Unistd H
Library Unistd H
Library Unistd H Library Unistd H
Library Unistd H
Library Unistd H
Privacy statement Using this site means you accept its terms Feedback to webmaster
Library Unistd H
© 2013 Hewlett-Packard Development Company, L.P.
Library Unistd H