PT-2013-1745

Name of the Vulnerable Software and Affected Versions Oracle Access Manager versions 10.1.4.3.0, 11.1.1.5.0, and 11.1.2.0.0 Description The issue affects the integrity of the system, related to OAM Webgate, allowing remote attackers to exploit it. Recommendations For versions 10.1.4.3.0,...

HP Intelligent Management Center User Access Manager Datagram Parsing Code Execution

According to its version number, the HP Intelligent Management Center User Access Manager installed on the remote host is affected by a stack-based buffer overflow vulnerability. By sending a specially crafted datagram, a remote, unauthenticated attacker could execute arbitrary code on the remote...

HP Intelligent Management Center User Access Manager unauthorized access

uam.exe buffer overflow...

Stack overflow

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

CVE-2012-3274

HP IMC UAM (uam.exe) is affected by a stack-based buffer overflow in the UDP data path for log handling, prior to IMC 5.1 E0101P01. The issue can allow remote code execution via specially crafted datagrams, with public references describing exploitation over UDP port 1811 and a patch-based remedi...

CVE-2012-3274

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

EMC RSA Access Manager replay attack

It's possible to replays sniffed session...

HP Device Access Manager for Protect Tools Information Store ActiveX memory corruption

Buffer overflows in different methods...

ESA-2012-026: RSA Access Manager Session Replay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-026: RSA Access Manager Session Replay Vulnerability EMC Identifier: ESA-2012-026 CVE Identifier: CVE-2012-2281 Severity Rating: CVSSv2 Base Score: 6. 8 AV:A/AC:H/Au:N/C:C/I:C/A:C Affected Products: RSA Access Manager Server version 6.0.x RSA...

Design/Logic Flaw

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

CVE-2012-2281

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

CVE-2012-2281

CVE-2012-2281 affects EMC RSA Access Manager Server 6.x (before 6.1 SP4) and RSA Access Manager Agent. The root cause is improper invalidation/validation of session tokens after a user logs out, which can let an attacker replay a valid session via unspecified vectors. The impact is that remote at...

CVE-2012-2281: Improper Authentication

EMC RSA Access Manager Server 6.x before 6.1 SP4 and RSA Access Manager Agent do not properly validate session tokens after a logout, which might allow remote attackers to conduct replay attacks via unspecified vectors...

PT-2012-3920

Name of the Vulnerable Software and Affected Versions EMC RSA Access Manager Server versions prior to 6.1 SP4 EMC RSA Access Manager Agent affected versions not specified Description The issue is related to improper validation of session tokens after a logout, which could allow remote attackers t...

PT-2011-4868

Name of the Vulnerable Software and Affected Versions HP Protect Tools Device Access Manager versions prior to 6.1.0.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via a long SidString...

CVE-2011-4162: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 AddUser, 2 AddUserEx, 3 RemoveUser, 4 RemoveUserByGuide, 5 RemoveUserEx, and 6 RemoveUserRegardless methods in HP Protect Tools Device Access Manager PTDAM before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service heap memory corruption via a long SidStrin...

Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

Vulnerability ID: HTB23044 Reference: https://www.htbridge.ch/advisory/heapmemorycorruptioninhpdeviceaccessmanagerforprotecttoolsinformationstore.html Product: HP Device Access Manager for Protect Tools Information Store Vendor: Hewlett-Packard Vulnerable Version: Prior to v.6.1.0.1 Tested Versio...

HP Device Access Manager Memory Corruption

Vulnerability ID: HTB23044 Reference: https://www.htbridge.ch/advisory/heapmemorycorruptioninhpdeviceaccessmanagerforprotecttoolsinformationstore.html Product: HP Device Access Manager for Protect Tools Information Store Vendor: Hewlett-Packard Vulnerable Version: Prior to v.6.1.0.1 Tested Versio...

Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

No description provided by source. Vulnerable Version: Prior to v.6.1.0.1 Tested Version: 5.0.0.5 Vendor Notification: 26 August 2011 Vulnerability Type: Heap Memory Corruption Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption

HP Device Access Manager for HP ProtectTools 5.06.0 - Heap Memory Corruption source: https://www.securityfocus.com/bid/50895/info HP Device Access Manager for HP ProtectTools is prone to a remote heap-memory-corruption vulnerability. An attacker can exploit this issue to execute arbitrary code...