PT-2013-1930

Name of the Vulnerable Software and Affected Versions IBM SAN Volume Controller and Storwize V7000 versions 6.x before 6.4.1.3 Description The issue allows remote attackers to bypass authentication and obtain superuser access via IP packets. This affects the management GUI of the system...

CVE-2012-6354: Improper Authentication

The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets...

HP LeftHand Virtual SAN Appliance < 10.0 hydra Service Multiple RCE

According to the version fingerprinted by Nessus, the remote host is an HP LeftHand Virtual SAN Appliance prior to version 10.0. It is, therefore, affected by multiple unspecified remote code execution vulnerabilities in the hydra service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

HP LeftHand OS hydra Detection

One of the network services provided by the hydra daemon was detected on the remote host. This daemon runs on the HP LeftHand OS formerly SAN/iQ and is used in products such as the HP Virtual SAN appliance. This service is used for management and control. C Tenable Network Security, Inc...

Ryan Naraine on the Security Analyst Summit 2013

Dennis Fisher talks with Ryan Naraine, the founding editor of Threatpost, about the Security Analyst Summit in San Juan, the reason why so many talks at security conferences sound the same and why surprise talks are so valuable. Download: digitalunderground111 Podcast audio courtesy of sykboy65...

[security bulletin] HPSBST02846 SSRT100798 rev.1 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03661318 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03661318 Version: 1 HPSBST02846...

HP LeftHand Virtual SAN Appliance code execution

No description provided...

Hewlett-Packard LeftHand Virtual SAN Appliance Hydra Ping Hostname Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra service, specifically with the LHNModParam component. This process...

Hewlett-Packard LeftHand Virtual SAN Appliance Hydra Set Disk Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra service, specifically with the hel.module component. This process...

CVE-2012-3284

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

CVE-2012-3285

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513...

CVE-2012-3282

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468...

CVE-2012-3283

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

Code injection

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

Code injection

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

CVE-2012-3284

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

CVE-2012-3282

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468...

CVE-2012-3282

HP LeftHand Virtual SAN Appliance (hydra) before version 10.0 is affected by CVE-2012-3282. The hydra service allows remote code execution from unauthenticated remote attackers via the management interface (the vulnerability is associated with ZDI-CAN-1468). Evidence across connected docs also no...

CVE-2012-3284

HP LeftHand Virtual SAN Appliance Hydra SNMP Remote Code Execution (CVE-2012-3284) affects hydra service prior to version 10.0. The vulnerability exists in the SNMP processing path (snmp.module!OnSet) listening on TCP 13838, allowing unauthenticated remote code execution with root privileges by s...

CVE-2012-3283

HP LeftHand Virtual SAN Appliance Hydra before version 10.0 is affected by CVE-2012-3283, a remote code execution flaw in the hydra service (hel.module) that listens on TCP port 13838. The root cause is improper length validation of diag request parameters, leading to arbitrary code execution wit...