282 matches found
MDVA-2009:132 : gnome-power-manager
The gnome-power-manager package shipped in Mandriva 2009 Spring is not working without the gnome-session running in user's Desktop Environment. This update fixes this issue making gnome-power-manager work fine even if gnome-session is not started. %NASLMINLEVEL 70300 @DEPRECATED@ This script has...
HP Power Manager formExportDataLogs Directory Traversal (CVE-2009-4000)
HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS. A directory traversal vulnerability has been reported in HP Power Manager. The vulnerability is due to an input validation error while processing parameters sent to a certain form of the web based...
HP Power Manager formExportDataLogs Buffer Overflow (CVE-2009-3999)
HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS through a browser-based management console. It allows to monitor, manage, and control a single UPS locally and remotely. A buffer overflow vulnerability was reported in HP Power Manager. The vulnerabili...
HP Power Manager Remote Code Execution (CVE-2009-2685)
A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...
HP Power Manager < 4.2.10 Multiple Vulnerabilities
Binary data 5324.prm...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager code execution
Buffer overflow during authentication via web form. Buffer overflow in /goform/formExportDataLogs, directory traversal...
Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal
====================================================================== Secunia Research 20/01/2009 - HP Power Manager "formExportDataLogs" Directory Traversal - ====================================================================== Table of Contents Affected...
HP Power Manager < 4.2.10
The installed version of HP Power Manager is less than 4.2.10, and as such has the following vulnerabilities : - Adequate bounds checking is not performed on the 'Login' parameter of the login page, which could lead to a buffer overflow. A remote, unauthenticated attacker could exploit this to...
CVE-2009-4000
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...
Directory traversal
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...
CVE-2009-3999
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...
DSquare Exploit Pack: D2SEC_HPPM2
Name| d2sechppm2 ---|--- CVE| CVE-2009-3999 Exploit Pack| D2ExploitPack Description| HP Power Manager Export Logs Stack Overflow Vulnerability Notes|...
Stack overflow
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...
CVE-2009-4000
HP Power Manager vulnerable to a directory traversal issue in goform/formExportDataLogs (fileName parameter) that allows remote attackers to overwrite arbitrary files and potentially execute arbitrary code. Affected software: HP Power Manager versions before 4.2.10. Root cause: input validation e...
CVE-2009-3999
HP Power Manager prior to version 4.2.10 is affected by CVE-2009-3999 due to a stack-based buffer overflow in goform/formExportDataLogs triggered by a long fileName parameter. This allows remote code execution. Exploitation has public PoCs and modules (e.g., Metasploit/Exploit-DB references), ind...
CVE-2009-4000
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...