EUVD-2014-2654

Malware in sbrugna...

EUVD-2014-2652

Malware in sbrugna...

EUVD-2014-2651

Malware in sbrugna...

HP Intelligent Management Center Branch Intelligent Management Module 7.x < 7.0-E0201P02 Multiple Vulnerabilities

The version of the HP Intelligent Management Center Branch Intelligent Management System BIMS module on the remote host is version 7.x prior to 7.0-E0201P02 and has multiple vulnerabilities that could allow a remote attacker to access sensitive information via unspecified vectors. %NASLMINLEVEL...

CVE-2014-2618

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2080...

CVE-2014-2620

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2621

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2090...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312...

Code injection

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2088...

CVE-2014-2622

CVE-2014-2622 affects HP Intelligent Management Center (iMC) prior to 7.0 E02020P03 and HP Branch Intelligent Management System (BIMS) prior to 7.0 E0201P02, enabling remote authenticated attackers to obtain sensitive information or modify data via unknown vectors (ZDI-CAN-2312). The accompanying...

CVE-2014-2620

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-2089...

CVE-2014-2619

CVE-2014-2619 is an information-disclosure vulnerability affecting HP Intelligent Management Center (iMC) prior to 7.0 E02020P03 and HP Branch Intelligent Management System (BIMS) prior to 7.0 E0201P02. The HP advisory (HPSBHF02913) indicates remote disclosure of information without authenticatio...

CVE-2014-2621

HP iMC (HP Intelligent Management Center) and HP BIMS (Branch Intelligent Management System) are vulnerable to a remote information disclosure in versions before 7.0 E02020P03 (iMC) and before 7.0 E0201P02 (BIMS). The issue is identified as CVE-2014-2621 (ZDI-2090). The HP Security Bulletin HPSBH...

CVE-2014-2622

Unspecified vulnerability in HP Intelligent Management Center iMC before 7.0 E02020P03 and Branch Intelligent Management System BIMS before 7.0 E0201P02 allows remote authenticated users to obtain sensitive information or modify data via unknown vectors, aka ZDI-CAN-2312...

CVE-2014-2618

CVE-2014-2618 affects HP Intelligent Management Center (iMC) and HP Branch Intelligent Management System (BIMS) prior to certain 7.0 builds. The HP bulletin describes remote information disclosure via the UploadServlet (lack of authentication and insufficient input validation) that could allow an...

Stack overflow

Stack-based buffer overflow in the HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, S7800, and S8500 switches allows remote attackers to execute arbitrary code via a long URI...

Design/Logic Flaw

The HTTP module in the 1 Branch Intelligent Management System BIMS and 2 web management components on Huawei AR routers and S2000, S3000, S3500, S3900, S5100, S5600, and S7800 switches uses predictable Session ID values, which makes it easier for remote attackers to hijack sessions via a...

CVE-2012-6571

The CVE-2012-6571 issue affects Huawei devices (AR routers and S-series switches: S2000, S3000, S3500, S3900, S5100, S5600, S7800). The HTTP module in the BIMS/web management components uses predictable Session ID values, enabling remote attackers to hijack sessions via brute-force. This is docum...

Security Advisory-HTTP Session Management Vulnerability in HTTP Module

Branch Intelligent Management System BIMS and Web management is provided by Huawei for network and device management. Both BIMS and Web management use HTTP. Therefore, to use BIMS and Web management, you must enable HTTP. Because HTTP session ID generation is weak and predictable, an attacker can...