BMC Dashboards 7.6.01 - Cross-Site Scripting Information Disclosure

BMC Dashboards 7.6.01 - Cross-Site Scripting Information Disclosure source: https://www.securityfocus.com/bid/47731/info BMC Dashboards is prone to to multiple information-disclosure and cross-site scripting issues because the application fails to properly sanitize user-supplied input. A remote...

BMC Remedy Knowledge Management 7.5.00 - Default Account / Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47728/info BMC Remedy Knowledge Management is prone to a default-account vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Attackers can leverage the default account issue to bypa...

CVE-2011-0975

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

Stack overflow

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

CVE-2011-0975

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

CVE-2011-0975

CVE-2011-0975 affects BMC PATROL family products. A stack-based buffer overflow in the PATROL Agent Service Daemon allows remote code execution via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768. Affected components include Performance Analysis for Servers, Performance As...

PT-2011-2783

Name of the Vulnerable Software and Affected Versions BMC PATROL Agent Service Daemon for Performance Analysis for Servers versions 7.4.00 through 7.5.10 Performance Assurance for Servers versions 7.4.00 through 7.5.10 Performance Assurance for Virtual Servers versions 7.4.00 through 7.5.10...

CVE-2011-0975: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and...

BMC PATROL Agent integer overflow

Integer overflow on TCP/6768 traffic parsing...

ZDI-11-039: BMC PATROL Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability

ZDI-11-039: BMC PATROL Agent Service Daemon BGSMULTIPLEREADS Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-039 February 3, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: BMC Software -- Affected Products: BMC Software Patrol --...

BMC Perform Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of BMC Perform Agent. Authentication is not required to exploit this vulnerability. The specific flaw exists within the service daemon which listens by default on TCP port 6768. When processing the...

BMC SNMP Agent Default Community Name (public)

The remote SNMP server, listening on port 8161 probably part of BMC Patrol has a community name set to 'public'. An attacker may use this information to gain more knowledge about the remote host or to change the configuration of the remote system if the default community allow such modifications....

Intel®Xeon® 5500, 5600 Series Baseboard Management Component (BMC) Firmware Privilege Escalation

Summary: Intel is releasing a firmware update to mitigate a privilege escalation issue with Intel®Xeon® 5500, 5600 Series Baseboard Management Component BMC Firmware. Description: Under certain circumstances a privilege escalation issue is present in the Baseboard Management Component BMC firmwar...

Motorola SB5101 Hax0rware Rajko HTTPd - Remote Denial of Service (PoC)

Motorola SB5101 Hax0rware Rajko HTTPd - Remote Denial of Service PoC !/usr/bin/perl Motorola SB5101 Hax0rware Rajko HttpD Remote Exploit PoC Author: Dillon Beresford Date: 6/6/2010 Vendor: SBHacker & Motorola Software Link: http://www.sbhacker.net/forum/index.php Tested on Hax0rware 1.1 R30, R32...

CVE-2009-0344

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

CVE-2009-0344

The CVE-2009-0344 entry concerns an unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). Affected firmware is SP/BMC before version 3.20. The issue allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP)...

CVE-2009-0345

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

CVE-2009-0345

CVE-2009-0345 affects Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM). The vulnerability lies in ELOM prior to SP/BMC firmware 3.20, enabling remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor (SP) commands via unknown vectors. The iss...

CVE-2009-0344: Undefined Security Weakness

Unspecified vulnerability in the Embedded Lights Out Manager ELOM on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 allows remote attackers to obtain privileged ELOM login access or execute arbitrary Service Processor SP commands via unknown vectors, aka Bug ID...

Format string

Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message...