HP Operations Manager for UNIX security vulnerabilities

Few code edxecution vulnerabilities...

[security bulletin] HPSBMU03127 rev.1 - HP Operations Manager for UNIX, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04472866 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04472866 Version: 1 HPSBMU03127 rev....

CVE-2014-2648

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2649

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

Code injection

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2649

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2649

HP Operations Manager for UNIX (HP-UX) versions 9.10, 9.11 and 9.20 are identified as affected by CVE-2014-2649, a remote code execution vulnerability. The vulnerability is described as unspecified in vectors, enabling an unauthenticated attacker to execute arbitrary code on a remote host. HP’s s...

CVE-2014-2648

CVE-2014-2648 affects HP Operations Manager for UNIX versions 9.10 and 9.11, with a remote code execution vulnerability reported by HP/HP Security Bulletin HPSBMU03127. The exact attack vectors are not detailed in the provided documents, but the vulnerability allows an unauthenticated remote atta...

CVE-2014-2648

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2648: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

PT-2014-4853

Name of the Vulnerable Software and Affected Versions HP Operations Manager version 9.20 on UNIX Description The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations For HP Operations Manager version 9.20 on UNIX, at the...

PT-2014-4852 · Hewlett Packard · Hp Operations Manager

Name of the Vulnerable Software and Affected Versions: HP Operations Manager versions 9.10 through 9.11 on UNIX Description: The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations: For HP Operations Manager versions 9....

CVE-2014-2649: Undefined Security Weakness

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-5073

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

CVE-2014-5073

CVE-2014-5073 affects VMTurbo Operations Manager (vmtadmin.cgi) prior to 4.6 build 28657. The vulnerability allows remote command execution via shell metacharacters in the fileDate parameter of a DOWN call, enabling arbitrary commands. Connected sources indicate public exploitation/public PoCs an...

CVE-2014-5073

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

Code injection

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

CVE-2014-5073: Undefined Security Weakness

vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call...

PT-2014-6265

Name of the Vulnerable Software and Affected Versions VMTurbo Operations Manager versions prior to 4.6 build 28657 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a "DOWN" call to the 'vmtadmin.cgi' endpoint...