CVE-2019-3721

Dell EMC Open Manage System Administrator OMSA versions prior to 9.3.0 contain an Improper Range Header Processing Vulnerability. A remote unauthenticated attacker may send crafted requests with overlapping ranges to cause the application to compress each of the requested bytes, resulting in a...

Dell OpenManage Server Administrator 8.4 Directory Traversal

Now that a patch has been available for Dell OMSA to fix CVE-2016-4004 et al for a few days, I feel more comfortable discussing a severe variant of the vulnerability that works against Linux hosts new! and does not require credentials that work on the victim host new!. Admins running Dell OMSA on...

CVE-2016-4004

Directory traversal vulnerability in Dell OpenManage Server Administrator OMSA 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ dot dot backslash in the file parameter to ViewFile...