HP iMC 5.0 TFTP WRQ "Remote Code Execution" Vulnerability

HP Intelligent Management Center contains a flaw related to thetftpserver.exe component allowing the creation or upload of arbitrary files when handling Write Request packets. This may allow a remote attacker to upload arbitrary files which will allow for the execution of arbitrary code as the...

PT-2011-3414

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to execute arbitrary code via a large or invalid opcode field, related to a function pointer table in tftpserver.exe. Recommendatio...

PT-2011-3413

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center versions 5.0 before E0101L02 Description The issue is related to multiple stack-based buffer overflows in the tftpserver.exe component. This can be exploited by remote attackers to execute arbitrary code via...

PT-2011-3415

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a use-after-free vulnerability that allows remote attackers to execute arbitrary code via a long syslog packet. This is connected to an...

PT-2011-3410

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to create or overwrite files and subsequently execute arbitrary code via a crafted WRQ request to the tftpserver.exe in HP...

PT-2011-3409

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the img.exe component. This can be exploited by remote attackers to execute arbitrary code via a crafted...

PT-2011-3412

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the tftpserver.exe component. This allows remote attackers to execute arbitrary code via a long mode field...

PT-2011-3411

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC version 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the logging functionality of dbman.exe. This allows remote attackers to execute arbitrary code. The...

HP Intelligent Management Center Database Credentials Information Disclosure

HP 3Com IMC is a modular management system designed to integrate the management of devices, services and users. An information disclosure vulnerability has been reported in HP Intelligent Management Center IMC. A remote attacker may exploit this issue via a specially crafted HTTP request, to...

HP Intelligent Management Center Reporting Information Disclosure

HP 3Com IMC is a modular management system designed to integrate the management of devices, services and users. An information disclosure vulnerability has been reported in HP Intelligent Management Center IMC. The vulnerability is due to an error in the Intelligent Management Center that fails t...