CVE-2011-2685

Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file...

CVE-2011-2685

CVE-2011-2685 affects LibreOffice/OpenOffice family via a stack-based buffer overflow in the Lotus Word Pro import filter. A crafted .lwp file can remotely execute code. Impact is remote code execution with the attacker’s privileges; vulnerable versions require updating to a fixed release (LibreO...

CVE-2011-2685

Stack-based buffer overflow in the Lotus Word Pro import filter in LibreOffice before 3.3.3 allows remote attackers to execute arbitrary code via a crafted .lwp file...

LibreOffice 3.3 'Lotus Word Pro' document import filter contains multiple vulnerabilities

Overview LibreOffice 3.3.2 includes a feature to import 'Lotus Word Pro' .lwp documents. This import filter contains multiple vulnerabilities. CERT/CC has confirmed that code execution is possible by exploiting a stack buffer overflow. Description LibreOffice 3.3.2, 3.3.1, and possibly earlier...

Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)

$Id: hppowermanagerlogin.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-2685

siteadmin/adduser.php in Customer Paradigm PageDirector CMS does not properly restrict access, which allows remote attackers to bypass intended restrictions and add administrative users via a direct request...

CVE-2010-2685

CVE-2010-2685 concerns Customer Paradigm PageDirector CMS. The issue arises from improper access control in siteadmin/adduser.php, allowing remote attackers to bypass restrictions and add administrative users via a direct request. The vulnerability is documented with a high severity (CVSS v2 base...

CVE-2010-2685

creationtimestamp| type| source ---|---|--- 2010-06-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14089...

HP Power Manager Remote Code Execution (CVE-2009-2685)

A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...

HP Power Manager < 4.2.10

The installed version of HP Power Manager is less than 4.2.10, and as such has the following vulnerabilities : - Adequate bounds checking is not performed on the 'Login' parameter of the login page, which could lead to a buffer overflow. A remote, unauthenticated attacker could exploit this to...

[security bulletin] HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01905743 Version: 2 HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

HP Power Manager Administration Universal Buffer Overflow

!/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 07/11/2009 ryujin@bt:$ ./hppowermanager.py...

HP Power Manager Administration Universal Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ================================================================= HP Power Manager Administration Universal Buffer Overflow Exploit ================================================================= Title: HP Power Manager Administration...

CVE-2009-2685

creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10099 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16785 2018-05-29 15:50:33+00:00| seen|...

Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow

Hewlett-Packard HP Power Manager Administration Power Manager Administration - Universal Buffer Overflow !/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T...

Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow

!/usr/bin/python HP Power Manager Administration Universal Buffer Overflow Exploit CVE 2009-2685 Tested on Win2k3 Ent SP2 English, Win XP Sp2 English Matteo Memelli ryujin A-T offensive-security.com www.offensive-security.com Spaghetti & Pwnsauce - 07/11/2009 ryujin@bt:$ ./hppowermanager.py...

ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability

ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-081 November 5, 2009 -- CVE ID: CVE-2009-2685 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard Power Manager --...

DSquare Exploit Pack: D2SEC_HPPM

Name| d2sechppm ---|--- CVE| CVE-2009-2685 Exploit Pack| D2ExploitPack Description| HP Power Manager Login Stack Overflow Vulnerability Notes|...

CVE-2009-2685

HP Power Manager 4.x is affected by CVE-2009-2685 due to a stack-based buffer overflow in the login form of the management web server. The issue arises from insufficient bounds checking on the Login parameter, allowing remote attackers to execute arbitrary code (typically as SYSTEM) via a crafted...

Hewlett-Packard Power Manager Administration Buffer Overflow

This module exploits a stack buffer overflow in Hewlett-Packard Power Manager 4.2. Sending a specially crafted POST request with an overly long Login string, an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...