[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

HP System Management Homepage privilege escalation

Novell e-directory users have permissions of root group...

CVE-2007-3062

HP System Management Homepage (SMH) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 2.1.2 (Linux and Windows). The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors to a user’s browser when interacting with SMH web pages...

CVE-2007-3062

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-3062: Undefined Security Weakness

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

HP System Management Homepage cross-site scripting vulnerability

Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...

HP System Management Homepage (SMH)未明跨站脚本漏洞

HP System Management Homepage是一款基于WEB界面的管理程序。 HP System Management Homepage处理用户提交的输入存在问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management...

HP System Management Homepage < 2.1.2 Unspecified XSS

The version of HP System Management Homepage installed on the remote host fails to sanitize user input to unspecified parameters and scripts before using it to generate dynamic HTML. A remote attacker may be able to exploit these issues to cause arbitrary HTML and script code to be executed by a...

[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage &#40;SMH&#41;, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service &#40;DoS&#41;

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00786522 Version: 1 HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage SMH, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service DoS NOTICE: The informatio...

Authentication flaw

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

CVE-2006-1774

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

CVE-2006-1774

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

CVE-2006-1774: Undefined Security Weakness

HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...

Directory traversal

Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...

CVE-2006-1023

Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...

CVE-2006-1023: Undefined Security Weakness

Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...

HP System Management Version Detection

Binary data 4594.prm...

HP System Management Homepage (SMH) < 2.1.12 Unspecified XSS

Binary data 4595.prm...

HP System Management Homepage Detection

HP System Management Homepage SMH, formerly Compaq Web Management, is running on the remote web server. SMH is a web-based application for managing HP ProLiant and Integrity servers, or HP 9000 and HP Integrity servers. C Tenable Network Security, Inc. include"compat.inc"; if description...