CVE-2012-3285

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513...

CVE-2012-3283

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

CVE-2012-3285

HP LeftHand Virtual SAN Appliance hydra service (LHNModParam) on TCP port 13838 is affected by a stack buffer overflow in versions prior to 10.0. This allows a remote attacker to execute arbitrary code as root due to insufficient input length validation for the hostname during a Ping request. Rem...

CVE-2012-3284: Undefined Security Weakness

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1512...

PT-2013-1590

Name of the Vulnerable Software and Affected Versions HP LeftHand Virtual SAN Appliance hydra versions prior to 10.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. There is no information available about the estimated number of potentially affected...

CVE-2012-3282: Undefined Security Weakness

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1468...

CVE-2012-3283: Undefined Security Weakness

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1511...

PT-2013-1591

Name of the Vulnerable Software and Affected Versions HP LeftHand Virtual SAN Appliance hydra versions prior to 10.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For versions prior to 10.0, update to version 10.0 or later to resolve...

CVE-2012-3285: Undefined Security Weakness

Unspecified vulnerability on the HP LeftHand Virtual SAN Appliance hydra with software before 10.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1513...

PT-2013-1589

Name of the Vulnerable Software and Affected Versions HP LeftHand Virtual SAN Appliance hydra versions prior to 10.0 Description The issue allows remote attackers to execute arbitrary code via unknown vectors. Recommendations For versions prior to 10.0, update to version 10.0 or later to resolve...

PT-2013-1588

Name of the Vulnerable Software and Affected Versions HP LeftHand Virtual SAN Appliance versions prior to 10.0 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to password hash disclosure. Recommendations For versions prior to 10.0, update to...

At The Ritz-Carlton, San Juan, Puerto Rico

Held annually, this year’s Security Analyst Summit, as always aims to foster conversation and collaboration between Kaspersky Lab researchers and global law enforcement agencies, CERTs and other cyber-crime fighters...

HP SAN/iQ Virtual SAN Appliance Multiple Parameters Command Execution Vulnerabilities

HP SAN/iQ Virtual SAN Appliance is prone to multiple command execution vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP SAN/iQ Virtual SAN Appliance Second Parameter Command Execution Vulnerability

HP SAN/iQ Virtual SAN Appliance is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

HP LeftHand Virtual SAN Appliance unauthorized access

TCP/13841 service authentication bypass...

(0Day) HP LeftHand Virtual SAN Appliance Unauthenticated Access Remote Command Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the hydra component which listens by default on 13841/tcp. The hydra daemon i...

HP SAN/iQ <= 10.0 Root Shell Command Injection

The version of SAN/iQ running on the remote host has a command injection vulnerability. The hydra service, used for remote management and configuration, does not properly sanitize untrusted input. A remote attacker could exploit this to execute arbitrary commands as root. Authentication is...

CVE-2012-4361

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...

CVE-2012-4362

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838...

Code injection

lhn/public/network/ping in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance allows remote authenticated users to execute arbitrary commands via shell metacharacters in the second parameter...