HP OpenView Storage Data Protector备份客户端服务栈溢出漏洞

BUGTRAQ ID: 37396 CVECAN ID: CVE-2007-2280 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 5555端口上的备份客户端服务守护程序（OmniInet.exe）在处理发送给MSGPROTOCOL命令的超长参数时存在栈溢出漏洞，远程攻击者可以通过提交恶意请求触发这个溢出，导致以服务的权限执行任意代码。 HP OpenView Storage Data Protector 6.0 H...

HP OpenView Storage Data Protector rds.exe服务堆溢出漏洞

BUGTRAQ ID: 37386 CVECAN ID: CVE-2007-2281 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 1530端口上的Cell Manager Database服务（rds.exe）中存在堆溢出漏洞。该服务通过ncp32.NtrpTCPReceiveMsg接收以下格式的套接字数据： 0xB6298C234-byte size....data...

CVE-2007-4527

creationtimestamp| type| source ---|---|--- 2009-12-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10574...

Cisco IP Phone SIP INVITE Message Denial of Service (CVE-2007-1542)

There exists a denial of service vulnerability in Cisco's IP phone models 7960 and 7940. The affected firmware cannot handle a specially crafted SIP INVITE message with an invalid IP address, causing the phone to reboot upon receiving the message. As a result, a remote user can cause a denial of...

CVE-2007-4652

creationtimestamp| type| source ---|---|--- 2009-12-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10557...

CVE-2007-2281

HP OpenView Storage Data Protector Cell Manager (rds.exe) vulnerable to a heap overflow due to an integer overflow in _ncp32._NtrpTCPReceiveMsg() when processing data on TCP port 1530. The vulnerability exists in HP OpenView Data Protector 5.50 and 6.0, where a large size parameter leads to under...

CVE-2007-2280

CVE-2007-2280 describes a stack-based buffer overflow in HP OpenView Data Protector’s OmniInet.exe (Application Recovery Manager component) triggered by long MSG_PROTOCOL requests, enabling remote code execution. Public details in connected documents show Metasploit modules and Exploit-DB entries...

[security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01124817 Version: 1 HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be acte...

New cacti packages fix insufficient input sanitising

No description provided by source. - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

CVE-2007-5026

creationtimestamp| type| source ---|---|--- 2009-12-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10514...

[SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising

------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1954-1] New cacti packages fix insufficient input sanitising

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

SAP GUI WebViewer3D ActiveX Control Arbitrary File Overwrite (CVE-2007-4475)

The SAP GUI is the GUI client in SAP's 3-tier architecture of database, application server and client. A vulnerability was reported in the SAP GUI. The vulnerability is caused due to a boundary error in the bundled EAI WebViewer3D ActiveX control webviewer3d.dll when processing arguments passed t...

Vulnerability in core server (CVE-2009-4136)

Privilege escalation via changing session state in an index function. This closes a corner case related to vulnerabilities CVE-2009-3230 and CVE-2007-6600 below...

HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow

This module exploits a stack buffer overflow in the NCTAudioFile2.Audio ActiveX Control provided by various audio applications. By sending an overly long string to the "SetFormatLikeSample" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Adobe Flash Player FLV Processing Buffer Overflow (CVE-2007-3456)

Adobe Flash Player is a multimedia and application player. Flash Player runs the Sockware Flash SWF files, which contains multimedia content including vector and raster graphics, video, audio, and scripts. Flash Player is made available as a plug-in for a wide range of web browser applications...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Mandriva Security Advisory MDVSA-2009:251-1 (postgresql8.2)

The remote host is missing an update to postgresql8.2 announced via advisory MDVSA-2009:251-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only O...

Mandriva Security Advisory MDVSA-2009:126-1 (eggdrop)

The remote host is missing an update to eggdrop announced via advisory MDVSA-2009:126-1. OpenVAS Vulnerability Test $Id: mdksa20091261.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:126-1 eggdrop Authors: Thomas Reinke Copyright: Copyright c 2009...