Authentication flaw

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

CVE-2014-2609

The Java Glassfish Admin Console in HP Executive Scorecard 9.40 and 9.41 does not require authentication, which allows remote attackers to execute arbitrary code via a session on TCP port 10001, aka ZDI-CAN-2116...

CVE-2014-2611

Directory traversal vulnerability in the fndwar web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code, or obtain sensitive information or delete data, via unspecified vectors, aka ZDI-CAN-2120...

CVE-2014-2610

CVE-2014-2610 affects HP Executive Scorecard (CAP) in versions 9.40 and 9.41. The underlying issue is a directory-traversal flaw in the Content Acceleration Pack web application that allows an authenticated user to upload an executable file, enabling remote code execution. The ZDI advisory confir...

CVE-2014-2610

Directory traversal vulnerability in the Content Acceleration Pack CAP web application in HP Executive Scorecard 9.40 and 9.41 allows remote authenticated users to execute arbitrary code by uploading an executable file, aka ZDI-CAN-2117...

CVE-2014-2611

CVE-2014-2611 is a directory traversal vulnerability in HP Enterprise Scorecard’s fndwar web application (affecting HP Executive Scorecard v9.40 and v9.41). The flaw can allow a remote attacker to execute arbitrary code, or disclose/delete data, with the attack requiring authentication per ZDI-14...

CVE-2014-2609

The CVE affects HP Executive Scorecard (v9.40 and v9.41) where the Java Glassfish Admin Console allows unauthenticated remote code execution via a session on TCP port 10001. Root cause: authentication bypass on the Glassfish admin interface leading to arbitrary code execution under SYSTEM. Impact...

[security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04341295 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04341295 Version: 1 HPSBMU03048 rev....

HP Software Executive Scorecard security vulnerabilities

Directory traversal, code execution...

CVE-2013-6221

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031...

Directory traversal

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031...

CVE-2013-6221

Directory traversal vulnerability in CommunicationServlet in HP Service Virtualization 3.x before 3.50.1, when the AutoPass license server is enabled, allows remote attackers to create arbitrary files and consequently execute arbitrary code via unspecified vectors, aka ZDI-CAN-2031...

CVE-2013-6221

The CVE-2013-6221 vulnerability affects HP Service Virtualization (3.x) with AutoPass License Server enabled. A directory traversal flaw in CommunicationServlet allows remote attackers to create arbitrary files and potentially execute arbitrary code via unspecified vectors. Public references docu...

HP-UX PHCO_43917 : s700_800 11.11 m4(1) cumulative patch

s700800 11.11 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...

[security bulletin] HPSBMU03045 rev.1 - HP Service Virtualization Running AutoPass License Server, Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04333125 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04333125 Version: 1 HPSBMU03045 rev....

HP Service Virtualization code execution

Code execution via AutoPass License Server...

HP OneView Detection

Binary data hponeviewdetect.nbin...

HP OneView Unspecified Remote Privilege Escalation (HPSBGN03034)

The version of HP OneView installed on the remote host is 1.0 or 1.01. Such versions are potentially affected by an unspecified, remote privilege escalation vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

openSUSE Security Update : xen (openSUSE-SU-2013:1636-1)

Xen was updated to 4.1.6 c/s 23588 to fix various bugs and security issues. Following changes are listed : - Comment out the -include directive in Config.mk as the build service build seems to error out not finding '.config' xen-config.diff - bnc845520 - CVE-2013-4416: xen: ocaml xenstored...

HP Printers Information Disclosure Vulnerability (Apr 2014, Heartbleed)

A potential security vulnerability has been identified in HP Officejet Pro X printers and in certain Officejet Pro printers running OpenSSL. This is the OpenSSL vulnerability known as Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and...