HP Power Manager formLogin buffer overflow

Added: 12/28/2010 CVE: CVE-2010-4113 OSVDB: 69969 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability in the Administration interface allows remote attackers to...

HP Power Manager formLogin buffer overflow

Added: 12/28/2010 CVE: CVE-2010-4113 OSVDB: 69969 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability in the Administration interface allows remote attackers to...

CVE-2010-4113

HP Power Manager (HPPM) – A stack-based buffer overflow in the web management login form allows remote code execution via a specially crafted Login parameter, affecting versions before 4.3.2. The issue stems from a boundary error when processing URL/login input. Remediation: upgrade to HP Power M...

CuteNews/UTF-8 CuteNews Multiple Vulneablities

The host is running CuteNews/UTF-8 CuteNews and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbcutenewsnutf8cutenewsmultvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ CuteNews/UTF-8 CuteNews Multiple Vulneablities Authors: Antu Sanadi Udated By: Antu Sanadi on 2009-12-10 61...

CVE-2009-4113

CVE-2009-4113 affects CuteNews/CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b. The vulnerability is a static code injection in the Categories module that allows remote authenticated users with administrative privileges to inject arbitrary PHP code into data/category.db.php via the Category A...

CVE-2008-4113

creationtimestamp| type| source ---|---|--- 2008-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7618...

Linux Kernel 2.6.26.4 - SCTP Kernel Memory Disclosure

Linux Kernel 2.6.26.4 - SCTP Kernel Memory Disclosure / cve-2008-4113.c Linux Kernel http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4113 The sctpgetsockopthmacident function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp...

Debian Security Advisory DSA 1655-1 (linux-2.6.24)

The remote host is missing an update to linux-2.6.24 announced via advisory DSA 1655-1. OpenVAS Vulnerability Test $Id: deb16551.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1655-1 linux-2.6.24 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft In...

Debian: Security Advisory (DSA-1655-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1655-1 [email protected] http://www.debian.org/security/ dann frazier Oct 16, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1655-1] New Linux 2.6.24 packages fix several vulnerabilities

---------------------------------------------------------------------- Debian Security Advisory DSA-1655-1 [email protected] http://www.debian.org/security/ dann frazier Oct 16, 2008 http://www.debian.org/security/faq - ----------------------------------------------------------------------...

DSA-1655-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

CVE-2008-4445

CVE-2008-4445 affects the Linux kernel SCTP implementation prior to 2.6.26.4. The vulnerability resides in sctp_auth_ep_set_hmacs (net/sctp/auth.c) where the identifier index is not validated against SCTP_AUTH_HMAC_ID_MAX when SCTP-AUTH is enabled. This can allow local users to obtain sensitive i...

BELL-CVE-2008-4113 CVE-2008-4113 does not affect BellSoft software

Bulletin has no description...

CVE-2008-4113

The vulnerability CVE-2008-4113 affects the Linux kernel prior to 2.6.26.4 with SCTP-AUTH enabled. In sctp_getsockopt_hmac_ident (net/sctp/socket.c), an untrusted length value is used to bound data copied from kernel memory, allowing a local unprivileged user to disclose sensitive kernel memory c...

CVE-2008-4113

The sctpgetsockopthmacident function in net/sctp/socket.c in the Stream Control Transmission Protocol sctp implementation in the Linux kernel before 2.6.26.4, when the SCTP-AUTH extension is enabled, relies on an untrusted length value to limit copying of data from kernel memory, which allows loc...

CVE-2007-4113

Summary: CVE-2007-4113 affects the Advanced Webhost Billing System (AWBS) prior to version 2.6.0. The vulnerability allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors. The provided documents do not specify the exact attack vector, ...