HP Version Control Repository Manager for Linux < 7.5.0 Multiple Vulnerabilities (HPSBMU03396) (FREAK)

The version of HP Version Control Repository Manager VCRM installed on the remote Linux host is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows a...

CVE-2015-5410

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

Design/Logic Flaw

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2015-5411

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2015-5409

HP Version Control Repository Manager (VCRM) prior to 7.5.0 is affected by CVE-2015-5409: an unspecified buffer overflow due to improper validation of user-supplied input. A remote, authenticated attacker could cause a denial of service or execute arbitrary code. Remediation: upgrade to version 7...

CVE-2015-5409

Buffer overflow in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2015-5413

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2010-3994

Cross-site scripting XSS vulnerability in HP Version Control Repository Manager VCRM before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2005-2076

HP Version Control Repository Manager VCRM before 2.1.1.730 does not properly handle the "@" character in a proxy password, which could allow attackers with physical access to obtain portions of the password when it is displayed to the screen...

HP VCRM &#40;Version Control Repository Manager&#41; information leak

A part of the password may be shown if one contains '@' sign...