CVE-2011-1848

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1848 due to a stack-based buffer overflow in the img.exe component when processing a crafted length field in a packet, allowing remote code execution. Red Hat and other advisories reiterate this vulnerability in IM...

CVE-2011-1851

Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field...

CVE-2011-1850

Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action...

CVE-2011-1854

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1850

CVE-2011-1850 refers to a stack-based buffer overflow in HP Intelligent Management Center (IMC) 5.0, specifically in the dbman.exe logging functionality. The vulnerability allows remote attackers to execute arbitrary code via vectors related to a received action, with impact described as remote c...

CVE-2011-1851

CVE-2011-1851 affects HP Intelligent Management Center (IMC) 5.0 before E0101L02. The vulnerability is a stack-based buffer overflow in the tftpserver.exe component triggered by a long mode field in received TFTP packets, enabling remote code execution in the security context of the service. Red ...

CVE-2011-1848

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1854: Undefined Security Weakness

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1853: Improper Input Validation

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

CVE-2011-1850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action...

CVE-2011-1852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allow remote attackers to execute arbitrary code via crafted packet content accompanying a 1 DATA or 2 ERROR opcode...

[security bulletin] HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center (IMC), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02822750 Version: 1 HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center IMC, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon ...

PT-2011-3414

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to execute arbitrary code via a large or invalid opcode field, related to a function pointer table in tftpserver.exe. Recommendatio...

HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

PT-2011-3412

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the tftpserver.exe component. This allows remote attackers to execute arbitrary code via a long mode field...

PT-2011-3410

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to create or overwrite files and subsequently execute arbitrary code via a crafted WRQ request to the tftpserver.exe in HP...

PT-2011-3411

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC version 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the logging functionality of dbman.exe. This allows remote attackers to execute arbitrary code. The...