Hewlett-Packard LeftHand Virtual SAN Appliance Hydra Set Disk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra service, specifically with the hel.module component. This process...

CVE-2012-3282

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468...

CVE-2012-3284

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

CVE-2012-3285

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513...

CVE-2012-3283

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

Code injection

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

Code injection

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

CVE-2012-3282

HP LeftHand Virtual SAN Appliance (hydra) before version 10.0 is affected by CVE-2012-3282. The hydra service allows remote code execution from unauthenticated remote attackers via the management interface (the vulnerability is associated with ZDI-CAN-1468). Evidence across connected docs also no...

CVE-2012-3284

HP LeftHand Virtual SAN Appliance Hydra SNMP Remote Code Execution (CVE-2012-3284) affects hydra service prior to version 10.0. The vulnerability exists in the SNMP processing path (snmp.module!OnSet) listening on TCP 13838, allowing unauthenticated remote code execution with root privileges by s...

CVE-2012-3285

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513...

CVE-2012-3285

HP LeftHand Virtual SAN Appliance hydra service (LHNModParam) on TCP port 13838 is affected by a stack buffer overflow in versions prior to 10.0. This allows a remote attacker to execute arbitrary code as root due to insufficient input length validation for the hostname during a Ping request. Rem...

CVE-2012-3282

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468...

CVE-2012-3283

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

CVE-2012-3284

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

CVE-2012-3283

HP LeftHand Virtual SAN Appliance Hydra before version 10.0 is affected by CVE-2012-3283, a remote code execution flaw in the hydra service (hel.module) that listens on TCP port 13838. The root cause is improper length validation of diag request parameters, leading to arbitrary code execution wit...

At The Ritz-Carlton, San Juan, Puerto Rico

Held annually, this year’s Security Analyst Summit, as always aims to foster conversation and collaboration between Kaspersky Lab researchers and global law enforcement agencies, CERTs and other cyber-crime fighters...

HP SAN/iQ Virtual SAN Appliance Multiple Parameters Command Execution Vulnerabilities

HP SAN/iQ Virtual SAN Appliance is prone to multiple command execution vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP SAN/iQ Virtual SAN Appliance Second Parameter Command Execution Vulnerability

HP SAN/iQ Virtual SAN Appliance is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP LeftHand Virtual SAN Appliance unauthorized access

TCP/13841 service authentication bypass...

(0Day) HP LeftHand Virtual SAN Appliance Unauthenticated Access Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on 13841/tcp. The hydra daemon i...