2482 matches found
[security bulletin] HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage (SMH) for Windows, Incomplete Update Installation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01164065 Version: 1 HPSBMA02258 SSRT071470 rev.1 - HP System Management Homepage SMH for Windows, Incomplete Update Installation NOTICE: The information in this Security Bulletin should be acted...
HP System Management Homepage for Windows incomplete update
Some system updates may not be installed if HP Version Control Agent VCA or Version Control Repository Manager VCRM present on the same host...
Design/Logic Flaw
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
CVE-2007-3260
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
CVE-2007-3260
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
HP System Management Homepage privilege escalation
Novell e-directory users have permissions of root group...
[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...
CVE-2007-3062
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-3062
HP System Management Homepage (SMH) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 2.1.2 (Linux and Windows). The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors to a user’s browser when interacting with SMH web pages...
HP System Management Homepage cross-site scripting vulnerability
Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...
HP System Management Homepage (SMH)未明跨站脚本漏洞
HP System Management Homepage是一款基于WEB界面的管理程序。 HP System Management Homepage处理用户提交的输入存在问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management...
JVN#19240523 HP System Management Homepage cross-site scripting vulnerability
HP System Management Homepage SMH from Hewlett-Packard is a web-based interface that can manage HP servers. A cross-site scripting vulnerability exists in SMH. It is also confirmed that Compaq System Management Homepage, the product previous to SMH, contains a similar cross-site scripting...
HP System Management Homepage < 2.1.2 Unspecified XSS
The version of HP System Management Homepage installed on the remote host fails to sanitize user input to unspecified parameters and scripts before using it to generate dynamic HTML. A remote attacker may be able to exploit these issues to cause arbitrary HTML and script code to be executed by a...
CVE-2006-6730
OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode SMM handler via a write to an SMRAM address within /dev/xf86 aka the video card...
SSH Tectia Manager Agent进程本地特权提升漏洞
SSH Tectia基于SSH技术，集中管理情况下提供 安全的系统管理，安全的文件传输，安全的程序之间的连接。 SSH Tectia Manager下的管理代理程序存在漏洞，本地攻击者可以利用漏洞使用Unix管理代理以ROOT权限起用非特权进程。 只有在如下条件下可触发此问题： - 实际管理的sshd程序已经停止。 - 用户已启动自身的非特权进程两进制调用SSHD。 - 管理代理通过管理服务GUI中的管理服务"Restart"按钮来重新启动sshd服务程序。 - 通过进程列表读取信息，杀掉非特权进程sshd服务器，然后以ROOT权限重启动相同的两进制程序。...
Solaris 5.6 (sparc) : 107388-05
Sun Cluster 2.2: System Management Patch. Date this patch was last updated by Sun : Jul/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00786522 Version: 1 HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage SMH, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service DoS NOTICE: The informatio...
Multiple HP System Management Homepage security vulnerabilities
Protection bypass, crossite scripting...
CVE-2006-4306
Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control RBAC settings in the "File System Management" profile...
CVE-2006-4306
CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...