[security bulletin] HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02901775 Version: 1 HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD, Remote Execution of Arbitrary Code NOTICE: The...

PT-2011-3428

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center versions 5.0 before SP1 E0101P03 Description The issue is related to a stack-based buffer overflow in the iNodeMngChecker.exe component, which allows remote attackers to execute arbitrary code via a specific...

H3C / HP Intelligent Management Center Detection

Binary data hpimcdetect.nbin...

HP Intelligent Management Center TFTP Multiple Vulnerabilities

A TFTP server belonging to HP Intelligent Management Center is running on the remote host. This is a collection point for any HP Intelligent Management Center clients on the network. The installed version of this server contains a number of vulnerabilities, including code execution and arbitrary...

CVE-2011-2331

HP Intelligent Management Center (IMC) contains a heap-based buffer overflow in img.exe triggered by a crafted length value in a packet, allowing remote attackers to execute arbitrary code. Affected component: img.exe in IMC. Root cause: integer overflow leading to heap overflow. Impact: remote c...

PT-2011-3779

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC affected versions not specified Description The issue is related to an integer overflow in img.exe, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a crafte...

CVE-2011-2331: Undefined Security Weakness

Integer overflow in img.exe in HP Intelligent Management Center IMC allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer overflow, possibly related to an "recv" field...

(0Day) HP 3COM/H3C Intelligent Management Center img recv Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When...

HP Intelligent Management Center < 5.0 E0101-L02 Multiple Vulnerabilities

According to its version number, the HP Intelligent Management Center install on the remote host is potentially affected by multiple vulnerabilities : - A stack-based buffer overflow vulnerability exists in the 'img.exe' component. CVE-2011-1848 - A flaw exists in the 'tftpserver.exe' component...

HP Intelligent Management Center Application Detection

HP Intelligent Management Center IMC, a network management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid54627; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

HP Intelligent Management Center Detection

Binary data 5926.prm...

CVE-2011-1853

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

CVE-2011-1851

Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field...

CVE-2011-1848

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

Cross site request forgery (csrf)

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request...

CVE-2011-1853

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

CVE-2011-1848

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1848 due to a stack-based buffer overflow in the img.exe component when processing a crafted length field in a packet, allowing remote code execution. Red Hat and other advisories reiterate this vulnerability in IM...

CVE-2011-1849

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1849 in tftpserver.exe, enabling remote attackers to create/overwrite files and potentially execute arbitrary code via a crafted WRQ request. The vulnerability is part of a family of IMC issues (CVE-2011-1848 to CV...

HP iMC 5.0 TFTP WRQ "Remote Code Execution" Vulnerability

HP Intelligent Management Center contains a flaw related to thetftpserver.exe component allowing the creation or upload of arbitrary files when handling Write Request packets. This may allow a remote attacker to upload arbitrary files which will allow for the execution of arbitrary code as the...

CVE-2011-1851: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long mode field...