352 matches found
HP System Management Homepage iprange parameter command execution
Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...
HP System Management Homepage iprange parameter command execution
Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...
HP System Management Homepage iprange parameter command execution
Added: 04/12/2013 BID: 58817 OSVDB: 91812 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A vulnerability in HP SMH allows command execution when an attacker requests /proxy/DataValidation with a...
HP System Management - Anonymous Access Code Execution (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /HP System Management Homepage/ includ...
HP System Management Homepage - Local Privilege Escalation (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
HP System Management Homepage Local Privilege Escalation Vulnerability
HP System Management Homepage versions 7.1.2 and below include a setuid root smhstart which is vulnerable to a local buffer overflow in the SSLSHAREBASEDIR env variable. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...
HP System Management Homepage Local Privilege Escalation
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...
HP System Management Anonymous Access Code Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 /HP System Management Homepage/ includ...
HP System Management Homepage Local Privilege Escalation
Versions of HP System Management Homepage use exploit/linux/local/hp/smhstart msf undefinedsmhstart show actions ...actions... msf undefinedsmhstart set ACTION msf undefinedsmhstart show options ...show and set options... msf undefinedsmhstart run This module requires Metasploit:...
HP System Management Anonymous Access Code Execution
This module exploits an anonymous remote code execution on HP System Management 7.1.1 and earlier. The vulnerability exists when handling the iprange parameter on a request against /proxy/DataValidation. In order to work HP System Management must be configured with Anonymous access enabled. Modul...
HP System Management Homepage < 7.1.1 Multiple Vulnerabilities
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote host is earlier than 7.1.1 and is, therefore, reportedly affected by the following vulnerabilities : - The bundled version of the libxml2 library contains multiple vulnerabilities...
CVE-2012-2015
Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors...
CVE-2012-2012
HP System Management Homepage SMH before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...
CVE-2012-2013
Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors...
CVE-2012-2014
HP System Management Homepage SMH before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors...
CVE-2012-2016
Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows local users to obtain sensitive information via unknown vectors...
Design/Logic Flaw
HP System Management Homepage SMH before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...
Code injection
Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors...
Design/Logic Flaw
HP System Management Homepage SMH before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors...