CVE-2011-1848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1854: Undefined Security Weakness

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1853: Improper Input Validation

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

CVE-2011-1849: Improper Input Validation

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request...

CVE-2011-1850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action...

CVE-2011-1852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allow remote attackers to execute arbitrary code via crafted packet content accompanying a 1 DATA or 2 ERROR opcode...

HP Intelligent Management Center multiple security vulnerabilities

Multiple vulnerabilities in different components lead to remote code execution...

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

ZDI-11-164: HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-164 May 10, 2011 -- CVE ID: CVE-2011-1852 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected...

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

ZDI-11-163: HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-163 May 10, 2011 -- CVE ID: CVE-2011-1851 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

ZDI-11-162: HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-162 May 10, 2011 -- CVE ID: CVE-2011-1850 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...

PT-2011-3409

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the img.exe component. This can be exploited by remote attackers to execute arbitrary code via a crafted...

PT-2011-3411

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC version 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the logging functionality of dbman.exe. This allows remote attackers to execute arbitrary code. The...

PT-2011-3412

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the tftpserver.exe component. This allows remote attackers to execute arbitrary code via a long mode field...

PT-2011-3410

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to create or overwrite files and subsequently execute arbitrary code via a crafted WRQ request to the tftpserver.exe in HP...

PT-2011-3415

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a use-after-free vulnerability that allows remote attackers to execute arbitrary code via a long syslog packet. This is connected to an...

PT-2011-3413

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center versions 5.0 before E0101L02 Description The issue is related to multiple stack-based buffer overflows in the tftpserver.exe component. This can be exploited by remote attackers to execute arbitrary code via...

PT-2011-3414

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to execute arbitrary code via a large or invalid opcode field, related to a function pointer table in tftpserver.exe. Recommendatio...

HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

HP 3COM/H3C Intelligent Management Center tftpserver WRQ Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When...

HP 3COM/H3C Intelligent Management Center tftpserver mode Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...