203 matches found
HP LoadRunner MMS Protocol Buffer Overflow RCE
The version of HP LoadRunner installed on the remote Windows host is affected by an unspecified buffer overflow condition in the MMS protocol due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the...
HP LoadRunner Controller Scenario File Stack Buffer Overflow (CVE-2015-5426)
A stack-based buffer overflow vulnerability exists in HP LoadRunner Controller. The vulnerability is due to insufficient boundary checks while parsing scenario files. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafted ".lrs" files with the...
HP LoadRunner 11.52 / 12.00 / 12.01 / 12.02 / 12.50 Multiple Vulnerabilities
The version of HP LoadRunner installed on the remote Windows host is 11.52, 12.00, 12.01, 12.02, or 12.50, without the HPSBGN03609 hotfix. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied...
HP LoadRunner 11.52 / 12.00 / 12.01 / 12.02 / 12.50 Virtual Table Server RCE
The version of HP LoadRunner installed on the remote host is 11.52, 12.00, 12.01, 12.02, or 12.50. It is, therefore, affected by a remote code execution vulnerability in the Virtual Table Server VTS. An unauthenticated, remote attacker can exploit this, via a malicious connection string or SQL...
HP Loadrunner Virtual Table Server远程代码执行漏洞
No description provided by source...
CVE-2015-6857
Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...
Design/Logic Flaw
Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...
CVE-2015-6857
CVE-2015-6857 affects HP LoadRunner’s Virtual Table Server (VTS). The vulnerability enables remote code execution in VTS via unauthenticated access, with HP/Nessus/ZDI references detailing concrete vectors: HP LoadRunner VTS running 11.52, 12.00, 12.01, 12.02, or 12.50 is exploitable through a re...
CVE-2015-6857
Unspecified vulnerability in Virtual Table Server VTS in HP LoadRunner 11.52, 12.00, 12.01, 12.02, and 12.50 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-3138...
CVE-2015-5426
Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...
Design/Logic Flaw
Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...
CVE-2015-5426
HP LoadRunner Controller (pre-12.50) is affected by a stack-based buffer overflow while parsing .lrs scenario files, allowing local code execution in the context of the current user. HP’s security bulletin HPSBMU03339 rev.1 states only impacted versions are affected and recommends upgrading to HP...
CVE-2015-5426
Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...
[security bulletin] HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution of Arbitrary Code
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04692147 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04692147 Version: 1 HPSBMU03339 rev.1 - HP LoadRunner Controller, Local Execution...
HP LoadRunner < 12.50 Scenario File Local Code Execution
The version of HP LoadRunner installed on the remote host is prior to 12.50. It is, therefore, affected by a local code execution vulnerability due to an overflow condition that is triggered when handling scenario files .lrs. A local attacker can exploit this, via a specially crafted scenario fil...
HP LoadRunner launcher.dll Stack Buffer Overflow (CVE-2015-2110)
A stack buffer overflow vulnerability exists in HP LoadRunner. The vulnerability is due to insufficient validation of a length value in SSL communication with the HP LoadRunner. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to the vulnerab...
[security bulletin] HPSBGN03286 rev.1 - HP LoadRunner, Buffer Overflow
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04594015 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04594015 Version: 1 HPSBGN03286 rev....
HP LoadRunner 11.52 Buffer Overflow RCE
The version of HP LoadRunner installed on the remote host is 11.52 without the proper patch to 'twowaycomm.dll'. It is, therefore, affected by a buffer overflow flaw that can allow an unauthenticated, remote attacker to execute arbitrary code in the context of the HP LoadRunner Agent process. C...