CVE-2017-12561

CVE-2017-12561 - HPE iMC dbman Use-After-Free Hewlett Packard Enterprise Intelligent Management CenteriMC의 dbman 서비스에서 발생하는 use-after-free 취약점인 CVE-2017-12561에 대한 기술 분석입니다. 개요 이 취약점은 해당 서비스의 opcode 10012 처리에 영향을 미칩니다. 잘못된 객체 수명 관리로 인해 이전에 해제된 객체에 다시 접근할 수 있게 되어 메모리 손상이 발생합니다. ZDI-17-836에 따르면, 이 결...

EUVD-2018-18859

Malware in sbrugna...

HPE Intelligent Management Center Denial of Service (CVE-2019-5355)

A denial-of-service vulnerability exists in the dbman component of HPE Intelligent Management Center. Successful exploitation of this vulnerability could result in a denial of service condition on the target server...

HPE Intelligent Management Center dbman Command 10018 Multiple Vulnerabilities

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by multiple vulnerabilities : - A command injection vulnerability exists due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, via a series of specially...

HPE Intelligent Management Center (IMC) Stack Buffer Overflow Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A dbman decryptMsgAes stack buffer overflow vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center dbman Multiple Vulnerabilities

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists due to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this issue, via a command...

HPE Intelligent Management Center (IMC) Information Disclosure Vulnerability (CNVD-2019-23303)

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. A dbman Opcode 10001 information disclosure vulnerability exists in HPE Intelligent Management Center IMC...

HPE Intelligent Management Center (IMC) Hardcoded Credentials Remote Code Execution Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. HPE Intelligent Management Center IMC 7.3 E0506P09 and earlier versions have a dbman use of hardcoded...

CVE-2018-7115

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote buffer overflow in dbman.exe opcode 10001 on Windows. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7116

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7116

CVE-2018-7116 affects HPE Intelligent Management Center (iMC) PLAT prior to 7.3 E0605P06. The vulnerability lies in the dbman process, where improper validation of the length of user-supplied data in a Filename-related request can be exploited remotely to cause a denial of service. Affected versi...

PT-2018-17918

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center IMC versions prior to 7.3 E0605P06 Description The issue allows for a remote denial of service via dbman Opcode 10003 using the Filename parameter. Recommendations For versions prior to 7.3 E0605P06, update to...

CVE-2018-7114: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to remote buffer overflow in dbman leading to code execution. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

CVE-2018-7116: Improper Restriction of Operations within the Bounds of a Memory Buffer

HPE Intelligent Management Center IMC prior to IMC PLAT 7.3 E0605P06 is vulnerable to a remote denial of service via dbman Opcode 10003 'Filename'. This problem is resolved in IMC PLAT 7.3 E0605P06 or subsequent versions...

HPE Intelligent Management Center Buffer Overflow Vulnerability

HPE Intelligent Management Center iMC PLAT is a suite of network intelligent management center solutions from Hewlett Packard Enterprise HPE. The solution provides network-wide visibility and enables comprehensive management of resources, services and users. A buffer overflow vulnerability exists...

HPE Intelligent Management Center dbman Command 10001 Information Disclosure

The HPE Intelligent Management Center iMC dbman process running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via a command 10001 request, to view the contents of arbitrary directories under the security context of...

(0Day) Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10006 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

(0Day) Hewlett Packard Enterprise Intelligent Management Center dbman Opcode 10005 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dbman service, which listens on TCP port...

HPE Intelligent Management Center dbman RestoreZipFile Command Injection - Ver2 (CVE-2017-5821)

A command injection vulnerability exists in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling RestoreZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...

HPE Intelligent Management Center dbman BackupZipFile Command Injection - Ver2 (CVE-2017-5820)

A command injection vulnerability exist in the dbman component of HPE Intelligent Management Center. The vulnerability is due to missing validation of user-provided parameters when handling BackupZipFile commands. A remote, unauthenticated attacker can exploit the vulnerability by sending a...