2696 matches found
HP System Management Homepage cross-site scripting vulnerability
Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...
HP System Management Homepage (SMH)未明跨站脚本漏洞
HP System Management Homepage是一款基于WEB界面的管理程序。 HP System Management Homepage处理用户提交的输入存在问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management...
JVN#19240523 HP System Management Homepage cross-site scripting vulnerability
HP System Management Homepage SMH from Hewlett-Packard is a web-based interface that can manage HP servers. A cross-site scripting vulnerability exists in SMH. It is also confirmed that Compaq System Management Homepage, the product previous to SMH, contains a similar cross-site scripting...
HP System Management Homepage < 2.1.2 Unspecified XSS
The version of HP System Management Homepage installed on the remote host fails to sanitize user input to unspecified parameters and scripts before using it to generate dynamic HTML. A remote attacker may be able to exploit these issues to cause arbitrary HTML and script code to be executed by a...
CVE-2006-6730
OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode SMM handler via a write to an SMRAM address within /dev/xf86 aka the video card...
SSH Tectia Manager Agent进程本地特权提升漏洞
SSH Tectia基于SSH技术，集中管理情况下提供 安全的系统管理，安全的文件传输，安全的程序之间的连接。 SSH Tectia Manager下的管理代理程序存在漏洞，本地攻击者可以利用漏洞使用Unix管理代理以ROOT权限起用非特权进程。 只有在如下条件下可触发此问题： - 实际管理的sshd程序已经停止。 - 用户已启动自身的非特权进程两进制调用SSHD。 - 管理代理通过管理服务GUI中的管理服务"Restart"按钮来重新启动sshd服务程序。 - 通过进程列表读取信息，杀掉非特权进程sshd服务器，然后以ROOT权限重启动相同的两进制程序。...
Solaris 5.6 (sparc) : 107388-05
Sun Cluster 2.2: System Management Patch. Date this patch was last updated by Sun : Jul/13/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00786522 Version: 1 HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage SMH, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service DoS NOTICE: The informatio...
Multiple HP System Management Homepage security vulnerabilities
Protection bypass, crossite scripting...
CVE-2006-4306
Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control RBAC settings in the "File System Management" profile...
CVE-2006-4306
CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...
CVE-2006-4306: Undefined Security Weakness
Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control RBAC settings in the "File System Management" profile...
[SA21581] Sun Solaris RBAC Profile Privilege Escalation Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Multiple Sun Solaris security vulnerabilities
Privilege escalation with Role-Based Access Control, privilege escalation with 'format' if granted "File System Management" or similar role...
The network administrator and the attacker is a good helper for Wget using the detailed explanation-vulnerability warning-the black bar safety net
For a experience is not very rich attacker, worked extremely hard to get to the system management rights or the Telnet permissions later, often had to face such embarrassing scene: pour permissions what is the use For a system administrator, often to for system download some patch software or...
Authentication flaw
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774
CVE-2006-1774 affects HP System Management Homepage (SMH) version 2.1.3.132 when run on CompaqHTTPServer/9.9 across Windows, Linux, or Tru64 UNIX. The issue arises if Trust by Certificates is not enabled, allowing remote attackers to bypass authentication via a crafted URL. The NVD entry outlines...
CVE-2006-1774: Undefined Security Weakness
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...