CVE-2009-3999-HP-Power-Manager-4.2-Build-7-Buffer-Overflow

OSCPの準備の一環として、私はCVE-2009-3999（HP Power Manager 4.2 Build 7 バッファオーバーフローエクスプロイト）に出会いました。 この最新のスクリプトは、文字列とバイトの処理に関するPython 3互換性の問題を解決するために更新されており、ペイロードが生のバイナリとして送信されることでメモリ破損を防ぎます。...

HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)

$Id: hppowermanagerfilename.rb 14016 2011-10-20 17:40:21Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2009-3999: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter...

CVE-2009-4000: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to overwrite arbitrary files, and execute arbitrary code, via directory traversal sequences in the fileName parameter...