1347 matches found
Удаленное выполнение команд через HP Openview / Tivoli NetView (remote execution)
При получении определенного snmp-trap данные передаются внешнему приложению через командную строку, при этом не производится проверка shell-символов...
Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments
Overview Hewlett Packard's HP OpenView and Tivoli NetView are system management software packages. There is a vulnerability a component of these packages, ovactiond, that allows intruders to execute arbitrary commands as user bin. This may subsequently lead to a root compromise. Description HP...
IBM Tivoli NetView 5/6 - OVActionD SNMPNotify Command Execution
source: https://www.securityfocus.com/bid/2845/info ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote administrative facilities. A problem with the software makes it possibl...
openview.snmp.txt
HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVENT OVMgXNNMGener...
HP Openview NNM6.1 ovactiond bin exploit
Hello, Summery: HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVE...
IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution
IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution source: https://www.securityfocus.com/bid/2845/info ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote...
HP OpenView NNM v6.1 buffer overflow
HP OpenView NNM v6.1 buffer overflow The problem.. HP OpenView NNM v6.1 has a buffer overflow in the suid-root file ecsd located in the /opt/OV/bin/ directory. ecsd is not used in NNM, but is shipped and installed suid-root as default. Details.. je@openview uname -a SunOS openview 5.8...
Переполнение буфера в HP OpenView NNM (buffer overflow)
Переполнение буфера в suid root утилите ecsd...
HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'HP OpenView...
HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit)
HP OpenView OmniBack II A.03.50 - Command Execution Metasploit $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
CVE-2000-1058
The CVE-2000-1058 issue affects HP OpenView Network Node Manager (NNM) 6.1 and earlier, where the OverView5 CGI program contains a buffer overflow vulnerability. The flaw in the Java SNMP MIB Browser Object ID parsing can be exploited remotely via the SNMP service (snmp.exe), potentially causing ...
CVE-2000-1058
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager NNM 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service snmp.exe, aka the "Java SNMP MIB Browser Object ID parsing problem."...
CVE-2000-1057
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager NNM 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions...
CVE-2000-1057
CVE-2000-1057 : Vulnerabilities in the database configuration scripts of HP OpenView Network Node Manager (NNM) 6.1 and earlier allow local users to gain privileges, potentially via insecure permissions. The public documents do not specify affected versions beyond 6.1 and earlier, nor provide exp...
HP OpenView OmniBack II - Generic Remote Command Execution
HP OpenView OmniBack II - Generic Remote Command Execution / HP OpenView OmniBack II generic remote Exploit by DiGiT - [email protected] Omniback is a network backup system by HP, widely used. took me some time to figure out how omniback communicated then it was just a matter of finding a bug. This...
HP OpenView OmniBack II Generic Remote Exploit
Exploit for multiple platform in category remote exploits ============================================== HP OpenView OmniBack II Generic Remote Exploit ============================================== / HP OpenView OmniBack II generic remote Exploit by DiGiT - email protected Omniback is a network...
HP OpenView OmniBack II - Generic Remote Command Execution
/ HP OpenView OmniBack II generic remote Exploit by DiGiT - [email protected] Omniback is a network backup system by HP, widely used. took me some time to figure out how omniback communicated then it was just a matter of finding a bug. This lovely little exploit will give you a remote "shell" of...
CVE-2000-1057
Vulnerabilities in database configuration scripts in HP OpenView Network Node Manager NNM 6.1 and earlier allows local users to gain privileges, possibly via insecure permissions...
CVE-2000-1058
Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager NNM 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service snmp.exe, aka the "Java SNMP MIB Browser Object ID parsing problem."...