1815 matches found
CVE-2012-5204
CVE-2012-5204 affects HP Intelligent Management Center (iMC) and related ANM modules. The connected documentation confirms a directory traversal in the IctDownloadServlet that enables an unauthenticated attacker to retrieve arbitrary files with SYSTEM privileges, leading to information disclosure...
CVE-2012-5201
HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) prior to 5.2 E0401 are affected by an unspecified remote code execution vulnerability (CVE-2012-5201). Multiple connected sources indicate the flaw relates to the mibFileUpload component a...
CVE-2012-5202
Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1612...
CVE-2012-5208
CVE-2012-5208 affects HP Intelligent Management Center (iMC) and iMC for ANM prior to 5.2 E0401. The connected sources identify this as an information-disclosure vulnerability (remote, via unknown vectors per ZDI-1615) that could allow an attacker to obtain sensitive information. The issue is emb...
CVE-2012-5209
CVE-2012-5209 is an HP iMC/ANM remote-code-execution vulnerability (ZDI-CAN-1659) affecting HP iMC before 5.2 E0401. Connected sources specify the flaw in the flexFileUpload servlet leading to RCE. HP released fixes in 5.2 E0401 (Standard/Enterprise, ANM, TAM/UAM as applicable). CVSS v2 base scor...
CVE-2012-5207
Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1661...
CVE-2012-5208
Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1615...
CVE-2012-5203
CVE-2012-5203 in HP Intelligent Management Center (iMC) and iMC for ANM (pre-5.2 E0401) is an information-disclosure vulnerability exploitable via a ReportImgServlet directory-traversal. The issue arises from lack of authentication and insufficient input validation in ReportImgServlet when proces...
CVE-2012-5205
HP iMC/ANM (HP Intelligent Management Center and HP iMC for Automated Network Manager) before 5.2 E0401 contains multiple CVEs including CVE-2012-5205, enabling remote attackers to obtain sensitive information, modify data, or cause DoS via unspecified vectors. The connected materials corroborate...
CVE-2012-5210
HP iMC TACACS+ Authentication Manager (TAM) tamServletDownload vulnerability (CVE-2012-5210) is a directory-traversal flaw disclosed by ZDI-CAN-1646, enabling remote attackers to read files readable by SYSTEM and potentially disclose credentials. The issue affects TAM add-in module prior to 5.2 E...
CVE-2012-5207
HP iMC/ANM (HP Intelligent Management Center for ANM) 5.2 E0401 and earlier are affected by CVE-2012-5207, a remote vulnerability leading to information disclosure, potential data modification, and DoS via unspecified vectors (ZDI-CAN-1661). The issue affects multiple HP iMC components and was ad...
HP Intelligent Management Center Arbitrary File Upload
This module exploits a code execution flaw in HP Intelligent Management Center. The vulnerability exists in the mibFileUpload which is accepting unauthenticated file uploads and handling zip contents in an insecure way. Combining both weaknesses a remote attacker can accomplish arbitrary file...
HP Intelligent Management Center 5.1 E0202 Cross Site Scripting
Inshell Security Advisory http://www.inshell.net 1. ADVISORY INFORMATION ----------------------- Product: HP Intelligent Management Center Vendor URL: www.hp.com Type: Cross-Site Scripting CWE-79 Date found: 2012-06-08 Date published: 2013-03-04 CVSSv2 Score: CWE-79: 3,5 AV:N/AC:M/Au:S/C:N/I:P/A:...
HP Intelligent Management Center - 'topoContent.jsf' Cross-Site Scripting
source: https://www.securityfocus.com/bid/58293/info HP Intelligent Management Center is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...
HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting
HP Intelligent Management Center - topoContent.jsf Cross-Site Scripting source: https://www.securityfocus.com/bid/58293/info HP Intelligent Management Center is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...
HP Intelligent Management Center User Access Manager Datagram Parsing Code Execution
According to its version number, the HP Intelligent Management Center User Access Manager installed on the remote host is affected by a stack-based buffer overflow vulnerability. By sending a specially crafted datagram, a remote, unauthenticated attacker could execute arbitrary code on the remote...
HP Intelligent Management Center UAM - Remote Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Intelligent Management Center UAM...
HP Intelligent Management Center UAM Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Intelligent Management Center UAM...
HP Intelligent Management Center UAM Buffer Overflow Vulnerability
This Metasploit module exploits a remote buffer overflow in HP Intelligent Management Center UAM. The vulnerability exists in the uam.exe component, when using sprint in a insecure way for logging purposes. The vulnerability can be triggered by sending a malformed packet to the 1811/UDP port. The...
