ZDI-12-163 : (0Day) HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-163 : 0Day HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-163 August 22, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors:...

SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 5477)

This is a respin of the previous kernel update, which got retracted due to an IDE-CDROM regression, where any IDE CDROM access would hang or crash the system. Only this problem was fixed additionally. This kernel update fixes the following security problems : - On x8664 a denial of service attack...

CVE-2012-0055

OverlayFS in the Linux kernel before 3.0.0-16.28, as used in Ubuntu 10.0.4 LTS and 11.10, is missing inode security checks which could allow attackers to bypass security restrictions and perform unauthorized actions...

OverlayFS inode Security Checks - inode.c Local Security Bypass

OverlayFS inode Security Checks - inode.c Local Security Bypass source: https://www.securityfocus.com/bid/51529/info OverlayFS is prone to a local security-bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. !/bin/bash ddir=cat...

OverlayFS inode Security Checks - 'inode.c' Local Security Bypass

source: https://www.securityfocus.com/bid/51529/info OverlayFS is prone to a local security-bypass vulnerability. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions. !/bin/bash ddir=cat /proc/self/mountinfo | grep cgroup | grep devices | awk ' print ...

HP Intelligent Management Center iNodeMngChecker.exe Buffer Overflow

Added: 10/14/2011 CVE: CVE-2011-1867 BID: 48527 OSVDB: 73597 Background HP Intelligent Management Center, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. The iNodeMngChecker.exe component listens,...

HP iNode Management Center Detection

Binary data hpinodemanagementcenterdetect.nbin...

HP iNode Management Center Buffer Overflow (HPSB3C02687) (remote check)

Binary data hpinodemanagementcenterHPSB3C02687remote.nbin...

HP iNode Management Center Remote Code Execution (HPSB3C02687)

The remote Windows host has an installation of HP iNode Management Center that is affected by a remote code execution vulnerability. An unauthenticated remote attacker can send a specially crafted packet that could result in a stack-based buffer overflow. A successful attack will allow running...

CVE-2011-1867

Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...

CVE-2011-1867

Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...

HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C/3Com iNode Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the iNOdeMngChecker.exe component which listens by default on TCP port 9090...

Apache HTTP Server ETag Header Information Disclosure Weakness

A weakness has been discovered in the Apache HTTP Server if configured to use the FileETag directive. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Ubuntu 9.10 / 10.04 LTS / 10.10 : linux, linux-ec2 vulnerabilities (USN-1041-1)

Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. CVE-2010-3301 Dan Rosenberg discovered that the btrfs filesystem did...

CVE-2011-0401

Piwik before 1.1 does not properly limit the number of files stored under tmp/sessions/, which might allow remote attackers to cause a denial of service inode consumption by establishing many sessions...

Unbreakable enterprise kernel security update

2.6.32-100.20.1.el5 - fs xfs: return inode fork offset in bulkstat for fsr Dave Chinner - fs xfs: always use iget in bulkstat Dave Chinner CVE-2010-2943 - fs xfs: validate untrusted inode numbers during lookup Dave Chinner CVE-2 010-2943 - fs xfs: rename XFSIGETBULKSTAT to XFSIGETUNTRUSTED Dave...

CVE-2010-2943

CVE-2010-2943 affects the Linux kernel's XFS implementation up to version 2.6.34, where inode allocation B-trees are not consulted before reading inode buffers. This allows remote authenticated users to read unlinked files or read/overwrite disk blocks that were previously allocated to an unlinke...

CVE-2010-2943

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

kernel: xfs: validate inode numbers in file handles correctly

The xfs implementation in the Linux kernel before 2.6.35 does not look up inode allocation btrees before reading inode buffers, which allows remote authenticated users to read unlinked files, or read or overwrite disk blocks that are currently assigned to an active file but were previously assign...

PT-2010-4424 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.35 Description: The issue allows remote authenticated users to read unlinked files or read and overwrite disk blocks that are currently assigned to an active file but were previously assigned to an unlinked...