441 matches found
CVE-2007-3260
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
CVE-2007-3260: Undefined Security Weakness
HP System Management Homepage SMH before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges...
[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...
HP System Management Homepage privilege escalation
Novell e-directory users have permissions of root group...
CVE-2007-3062
HP System Management Homepage (SMH) is affected by a cross-site scripting (XSS) vulnerability in versions prior to 2.1.2 (Linux and Windows). The vulnerability allows an attacker to inject arbitrary web script or HTML via unspecified vectors to a user’s browser when interacting with SMH web pages...
CVE-2007-3062
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-3062: Undefined Security Weakness
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 2.1.2 running on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
HP System Management Homepage cross-site scripting vulnerability
Overview The HP System Management Homepage contains a cross-site scripting vulnerability. Description The HP System Management Homepage SMH server is a web-based interface that can manage HP servers running the Microsoft Windows or Linux operating systems.The SMH contains an unspecified cross-sit...
HP System Management Homepage (SMH)未明跨站脚本漏洞
HP System Management Homepage是一款基于WEB界面的管理程序。 HP System Management Homepage处理用户提交的输入存在问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.1 HP System Management Homepage 2.1 HP System Management Homepage 2.0.2 HP System Management Homepage 2.0.1 HP System Management...
HP System Management Homepage < 2.1.2 Unspecified XSS
The version of HP System Management Homepage installed on the remote host fails to sanitize user input to unspecified parameters and scripts before using it to generate dynamic HTML. A remote attacker may be able to exploit these issues to cause arbitrary HTML and script code to be executed by a...
[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00786522 Version: 1 HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage SMH, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service DoS NOTICE: The informatio...
Authentication flaw
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
CVE-2006-1774: Undefined Security Weakness
HP System Management Homepage SMH 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypass authentication via a crafted URL...
Directory traversal
Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...
CVE-2006-1023
Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...
CVE-2006-1023: Undefined Security Weakness
Directory traversal vulnerability in HP System Management Homepage SMH 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors...