CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Technical analysis of CVE-2017-12561, a use-after-free vulnerability in the dbman service of Hewlett Packard Enterprise Intelligent Management Center iMC. Overview The vulnerability affects the service's handling of opcode 10012. Incorrect object...

EUVD-2018-18859

Malware in sbrugna...

HPE Intelligent Management Center Denial of Service (CVE-2019-5355)

A denial-of-service vulnerability exists in the dbman component of HPE Intelligent Management Center. Successful exploitation of this vulnerability could result in a denial of service condition on the target server...

HPE Intelligent Management Center dbman Command 10018 Multiple Vulnerabilities

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by multiple vulnerabilities : - A command injection vulnerability exists due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, via a series of specially...

HPE Intelligent Management Center (IMC) Stack Buffer Overflow Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A dbman decryptMsgAes stack buffer overflow vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center (IMC) Hardcoded Credentials Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. HPE Intelligent Management Center IMC 7.3 E0506P09 and earlier versions have a dbman use of hardcoded...

HPE Intelligent Management Center (IMC) Information Disclosure Vulnerability (CNVD-2019-23303)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A dbman Opcode 10001 information disclosure vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center dbman Multiple Vulnerabilities

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this issue, via a command...

PT-2019-12581

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC PLAT versions prior to 7.3 E0506P09 Description A remote code execution issue was identified, related to the use of hard-coded credentials in the dbman component. This allows for potential exploitation...

CVE-2018-7116

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7115

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7116

CVE-2018-7116 affects HPE Intelligent Management Center (iMC) PLAT prior to 7.3 E0605P06. The vulnerability lies in the dbman process, where improper validation of the length of user-supplied data in a Filename-related request can be exploited remotely to cause a denial of service. Affected versi...

CVE-2018-7116: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7114: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

PT-2018-17918

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC versions prior to 7.3 E0605P06 Description The issue allows for a remote denial of service via dbman Opcode 10003 using the Filename parameter. Recommendations For versions prior to 7.3 E0605P06, update to...

HPE Intelligent Management Center Buffer Overflow Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A buffer overflow vulnerability exists...

HPE Intelligent Management Center dbman Command 10001 Information Disclosure

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via a command 10001 request, to view the contents of arbitrary directories under the security context of...

PT-2018-17916

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC versions prior to 7.3 E0605P06 Description The issue is related to a remote buffer overflow in the dbman component, which can lead to code execution. This problem has been resolved in version 7.3 E0605P06 ...

(0Day) Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10005 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

(0Day) Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...