HP Power Manager code execution

Buffer overflow during authentication via web form. Buffer overflow in /goform/formExportDataLogs, directory traversal...

Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal

====================================================================== Secunia Research 20/01/2009 - HP Power Manager "formExportDataLogs" Directory Traversal - ====================================================================== Table of Contents Affected...

DSquare Exploit Pack: D2SEC_HPPM2

Name| d2sechppm2 ---|--- CVE| CVE-2009-3999 Exploit Pack| D2ExploitPack Description| HP Power Manager Export Logs Stack Overflow Vulnerability Notes|...

Directory traversal

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...

CVE-2009-3999

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

Stack overflow

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

CVE-2009-4000

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...

CVE-2009-3999

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

CVE-2009-3999

HP Power Manager prior to version 4.2.10 is affected by CVE-2009-3999 due to a stack-based buffer overflow in goform/formExportDataLogs triggered by a long fileName parameter. This allows remote code execution. Exploitation has public PoCs and modules (e.g., Metasploit/Exploit-DB references), ind...

CVE-2009-4000

HP Power Manager vulnerable to a directory traversal issue in goform/formExportDataLogs (fileName parameter) that allows remote attackers to overwrite arbitrary files and potentially execute arbitrary code. Affected software: HP Power Manager versions before 4.2.10. Root cause: input validation e...

CVE-2009-4000

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...

[security bulletin] HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01971741 Version: 1 HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

Secunia Research: HP Power Manager "formExportDataLogs" Buffer Overflow

====================================================================== Secunia Research 20/01/2010 - HP Power Manager "formExportDataLogs" Buffer Overflow - ====================================================================== Table of Contents Affected...

HP Power Manager Detection (HTTP)

HTTP based detection of HP Power Manager. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:embedthis:goahead"; if description...

HP Power Manager Multiple RCE Vulnerabilities

HP Power Manager is prone to multiple remote code execution RCE vulnerabilities because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete compromise of the affected computer. Failed...

[security bulletin] HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01905743 Version: 2 HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

HP Power Manager Detection

This host is running HP Power Manager, an UPS management and monitoring utility. OpenVAS Vulnerability Test $Id: hppowermanagerdetect.nasl 6701 2017-07-12 13:04:06Z cfischer $ HP Power Manager Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is fre...

HP Power Manager Multiple Remote Code Execution Vulnerabilities

HP Power Manager is prone to multiple remote code-execution vulnerabilities because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete compromise of the affected computer. Failed exploi...

Hewlett-Packard Power Manager Administration Buffer Overflow.

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Hewlett-Packard...

Update Protection against HP Power Manager Remote Code Execution

A remote code execution vulnerability exists within HP Power Manager, a web-based application for managing a HP Uninterruptible Power System UPS. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based...