CVE-2012-0127

Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2012-0127

HP OpenView Performance Manager PMParamHandler Remote Code Execution (CVE-2012-0127). Affects HP Performance Manager 9.00; vulnerability exists in PMParamHandler served via Apache Tomcat on port 8081. Insufficient validation of a filename and embedded null byte truncation allow remote, unauthenti...

PT-2012-2331

Name of the Vulnerable Software and Affected Versions HP Performance Manager version 9.00 Description The issue allows remote attackers to execute arbitrary code. The exact vectors used for the exploitation are not specified. Recommendations For HP Performance Manager version 9.00, at the moment,...

CVE-2012-0127: Undefined Security Weakness

Unspecified vulnerability in HP Performance Manager 9.00 allows remote attackers to execute arbitrary code via unknown vectors...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

HP Performance Manager Apache Tomcat Policy Bypass

Added: 11/05/2010 CVE: CVE-2009-3548 BID: 36954 OSVDB: 60176 Background HP Performance Manager Software is a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom...

Preemptive Protection against HP Performance Manager Apache Tomcat Policy Bypass

A vulnerability exists in HP Performance Manager, a web-based analysis and visualization tool that analyzes performance trends of applications, systems, and services. HP Performance Manager incorporates Apache Tomcat 5 to help serve custom web applications. The vulnerability is due to insufficien...

HP Performance Manager multiple security vulnerabilities

Unauthorized access, crossite scripting, DoS...

CA eHealth Performance Manager crossite scripting

No description provided...

CA20100223-01: Security Notice for CA eHealth Performance Manager

-----BEGIN PGP SIGNED MESSAGE----- CA20100223-01: Security Notice for CA eHealth Performance Manager Issued: February 23, 2010 CA's support is alerting customers to a security risk with CA eHealth Performance Manager. A cross-site scripting vulnerability exists that can allow a remote attacker to...

CVE-2010-0640

Cross-site scripting XSS vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request...

CVE-2010-0640

CA eHealth Performance Manager 6.0.x–6.2.x has a cross-site scripting (XSS) vulnerability in the web interface due to insufficient validation of certain characters in requests. An attacker can entice a user to follow a malicious URL, potentially exfiltrating sensitive information via injected scr...

CVE-2010-0640: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in CA eHealth Performance Manager 6.0.x through 6.2.x, when malicious HTML detection is disabled, allows remote attackers to inject arbitrary web script or HTML via a crafted request...

Authentication flaw

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

CVE-2007-1972

CVE-2007-1972 affects BMC Performance Manager; PatrolAgent.exe on TCP port 3181 allows remote modification of configuration files without authentication by altering SNMP parameters (e.g., masterAgentName, masterAgentStartLine), purportedly enabling arbitrary code execution. The ZDI advisory detai...

CVE-2007-1972

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

BMC Performance Manager PatrolAgent.EXE内存破坏漏洞

BMC Performance Manager是一款端到端系统管理解决方案。 BMC Performance Manager存在设计错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 PatrolAgent.exe监听TCP 3181端口，服务允许远程攻击者修改配置文件而不需要任何验证。攻击者修改在SNMP公共定义中的参数，如masterAgentName和masterAgentStartLine可导致任意代码执行。 BMC Software Performance Manager 目前没有解决方案提供： http://www.bmc.com/...