183 matches found
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager < 4.2.10
The installed version of HP Power Manager is less than 4.2.10, and as such has the following vulnerabilities : - Adequate bounds checking is not performed on the 'Login' parameter of the login page, which could lead to a buffer overflow. A remote, unauthenticated attacker could exploit this to...
DSquare Exploit Pack: D2SEC_HPPM2
Name| d2sechppm2 ---|--- CVE| CVE-2009-3999 Exploit Pack| D2ExploitPack Description| HP Power Manager Export Logs Stack Overflow Vulnerability Notes|...
CVE-2009-3999
HP Power Manager prior to version 4.2.10 is affected by CVE-2009-3999 due to a stack-based buffer overflow in goform/formExportDataLogs triggered by a long fileName parameter. This allows remote code execution. Exploitation has public PoCs and modules (e.g., Metasploit/Exploit-DB references), ind...
Secunia Research: HP Power Manager "formExportDataLogs" Buffer Overflow
====================================================================== Secunia Research 20/01/2010 - HP Power Manager "formExportDataLogs" Buffer Overflow - ====================================================================== Table of Contents Affected...
[security bulletin] HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01971741 Version: 1 HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...
Ubuntu Update for krb5, librpcsecgss vulnerability USN-511-1
Ubuntu Update for Linux kernel vulnerabilities USN-511-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5111.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for krb5, librpcsecgss vulnerability USN-511-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...
Fedora Update for krb5 FEDORA-2007-2066
Check for the Version of krb5 OpenVAS Vulnerability Test Fedora Update for krb5 FEDORA-2007-2066 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Fedora Update for krb5 FEDORA-2007-690
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-3999
CVE-2008-3999 affects the Oracle Database OLAP component (versions 9.2.0.8, 9.2.0.8DV, and 10.1.0.5). The issue is described as an unspecified vulnerability related to SYS.OLAPIMPL_T that could allow remote authenticated users to affect availability. Exploitation details are not provided in the s...
Gentoo Security Advisory GLSA 200710-01 (librcpsecgss)
The remote host is missing updates announced in advisory GLSA 200710-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Debian Security Advisory DSA 1367-2 (krb5)
The remote host is missing an update to krb5 announced via advisory DSA 1367-2. OpenVAS Vulnerability Test $Id: deb13672.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1367-2 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 1387-1 (librpcsecgss)
The remote host is missing an update to librpcsecgss announced via advisory DSA 1387-1. OpenVAS Vulnerability Test $Id: deb13871.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1387-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian: Security Advisory (DSA-1387-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SuSE 10 Security Update : librpcsecgss (ZYPP Patch Number 4601)
This update fixes a security problem in the librpcsecgss library used by NFSv4 also found in krb5. A invalid packet could underflow and potentially cause memory corruption and code execution. CVE-2007-3999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...
SuSE 10 Security Update : Kerberos (ZYPP Patch Number 4192)
This update of krb5 fixes two bugs in kadmind that can be used to execute arbitrary code remotely. CVE-2007-3999 / CVE-2007-4000 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
SuSE 10 Security Update : Kerberos 5 (ZYPP Patch Number 4249)
This update improves the patch for the previously released security update of krb5 to fix CVE-2007-3999 / CVE-2007-4000. CVE-2007-4743 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...
Mac OS X < 10.4.11 Multiple Vulnerabilities (Security Update 2007-008)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.11 or a version of Mac OS X 10.3 which does not have Security Update 2007-008 applied. This update contains several security fixes for the following programs : - Flash Player Plugin - AppleRAID - BIND - bzip2 -...
openSUSE 10 Security Update : librpcsecgss (librpcsecgss-4600)
This update fixes a security problem in the librpcsecgss library used by NFSv4 also found in krb5. A invalid packet could underflow and potentially cause memory corruption and code execution. CVE-2007-3999 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...
Fedora 7 : krb5-1.6.1-4.fc7 (2007-2066)
The originally-used patch for CVE-2007-3999 didn't completely fix the bug. This update includes the revised patch. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format i...