CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

As part of my OSCP preparation I came across CVE-2009-3999 HP Power Manager 4.2 Build 7 Buffer Overflow exploit. This latest script is updated to resolve Python 3 compatibility issues regarding string and byte handling, ensuring the payload is transmitted as raw binary to avoid memory mangling...

HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)

$Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-3999: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

CVE-2009-4000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...