324 matches found
HP Power Manager formExportDataLogs Buffer Overflow (CVE-2009-3999)
HP Power Manager is a web-based application for managing a HP Uninterruptible Power System UPS through a browser-based management console. It allows to monitor, manage, and control a single UPS locally and remotely. A buffer overflow vulnerability was reported in HP Power Manager. The vulnerabili...
HP Power Manager Remote Code Execution (CVE-2009-2685)
A remote code execution vulnerability exists within HP Power Manager. The vulnerability is due to insufficient bounds checking in the HP Power Manager while processing URL parameters in the login form of the web based management web server. Remote unauthenticated attackers can exploit this...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager < 4.2.10 Multiple Vulnerabilities
Binary data 5324.prm...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager formExportDataLogs buffer overflow
Added: 01/22/2010 CVE: CVE-2009-3999 BID: 37867 OSVDB: 61848 Background HP Power Manager is a web-based application that enables administrators to manage an HP UPS from a browser-based management console. Problem A buffer overflow vulnerability HP Power Manager allows remote attackers to execute...
HP Power Manager < 4.2.10
The installed version of HP Power Manager is less than 4.2.10, and as such has the following vulnerabilities : - Adequate bounds checking is not performed on the 'Login' parameter of the login page, which could lead to a buffer overflow. A remote, unauthenticated attacker could exploit this to...
Secunia Research: HP Power Manager "formExportDataLogs" Directory Traversal
====================================================================== Secunia Research 20/01/2009 - HP Power Manager "formExportDataLogs" Directory Traversal - ====================================================================== Table of Contents Affected...
HP Power Manager code execution
Buffer overflow during authentication via web form. Buffer overflow in /goform/formExportDataLogs, directory traversal...
DSquare Exploit Pack: D2SEC_HPPM2
Name| d2sechppm2 ---|--- CVE| CVE-2009-3999 Exploit Pack| D2ExploitPack Description| HP Power Manager Export Logs Stack Overflow Vulnerability Notes|...
CVE-2009-3999
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...
Directory traversal
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...
CVE-2009-4000
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...
Stack overflow
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...
CVE-2009-3999
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...
CVE-2009-3999
HP Power Manager prior to version 4.2.10 is affected by CVE-2009-3999 due to a stack-based buffer overflow in goform/formExportDataLogs triggered by a long fileName parameter. This allows remote code execution. Exploitation has public PoCs and modules (e.g., Metasploit/Exploit-DB references), ind...
CVE-2009-4000
Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...
CVE-2009-4000
HP Power Manager vulnerable to a directory traversal issue in goform/formExportDataLogs (fileName parameter) that allows remote attackers to overwrite arbitrary files and potentially execute arbitrary code. Affected software: HP Power Manager versions before 4.2.10. Root cause: input validation e...
Secunia Research: HP Power Manager "formExportDataLogs" Buffer Overflow
====================================================================== Secunia Research 20/01/2010 - HP Power Manager "formExportDataLogs" Buffer Overflow - ====================================================================== Table of Contents Affected...