15739 matches found
CVE-2013-6200
CVE-2013-6200 concerns a local vulnerability in HP-UX’s m4(1) on HP-UX B.11.23 and B.11.31, allowing local users to obtain sensitive information or modify data via unspecified vectors. HP's security bulletin HPSBUX02963 (SSRT101297) and subsequent patches confirm affected versions and remediation...
CVE-2013-6200
Unspecified vulnerability in m4 in HP HP-UX B.11.23 and B.11.31 allows local users to obtain sensitive information or modify data via unknown vectors...
CVE-2013-6207
HP SiteScope SOAP loadFileContents vulnerability (CVE-2013-6207) affects SiteScope 10.1x, 11.1x, 11.21. The flaw in handling SOAP requests allows remote, unauthenticated attackers to trigger remote code execution, arbitrary file download, or DoS. ZDI notes exploitation via SOAP endpoints without ...
CVE-2013-6207
Unspecified vulnerability in the loadFileContents function in the SOAP implementation in HP SiteScope 10.1x, 11.1x, and 11.21 allows remote attackers to read arbitrary files or cause a denial of service via unknown vectors, aka ZDI-CAN-2084...
HP Security Management System未明远程代码执行漏洞
Bugtraq ID:65970 CVE ID:CVE-2013-6201 HP Security Management System是一个惠普公司开发的安全管理系统。 HP Security Management System存在未明错误，允许攻击者利用漏洞执行任意代码。 0 HP Security Management System 3.3.0 HP Security Management System 3.5.0 HP Security Management System 3.6.0 HP Security Management System 3.6.0 patch 1 厂商补丁：...
HP Data Protector Backup Client Service Remote Code Execution Exploit
Exploit for windows platform in category remote exploits require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in...
HP-UX PHCO_43843 : s700_800 11.23 m4(1) cumulative patch
s700800 11.23 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...
HP-UX PHCO_43835 : s700_800 11.31 m4(1) cumulative patch
s700800 11.31 m41 cumulative patch : A potential security vulnerability has been identified with HP-UX's m41 macro processor command. The vulnerability could be exploited locally resulting in unauthorized access. References: CVE-2013-6200, SSRT101297. %NASLMINLEVEL 70300 C Tenable Network Securit...
HP Data Protector - Backup Client Service Remote Code Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
HP AIO Archive Query Server oasoa.exe Stack Buffer Overflow (CVE-2013-6189)
A stack buffer overflow vulnerability exists in HP Application Information Optimizer. The vulnerability is due to insufficient sanitization on the range of the opcode value. A remote unauthenticated attacker can leverage this vulnerability by sending crafted messages to the server...
HP SiteScope 'loadFileContents' SOAP请求远程代码执行漏洞
BUGTRAQ ID: 65972 CVECAN ID: CVE-2013-6207 HP SiteScope是无代理监控软件，可维护其分布式IT 基础架构的可用性和性能。 SiteScope 10.1x, 11.1x, 11.21版本的loadFileContents SOAP功能存在安全漏洞，成功利用后可导致任意代码执行、任意文件下载和拒绝服务。 0 HP SiteScope 11.21 HP SiteScope 11.1x HP SiteScope 10.1x 厂商补丁： HP -- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
HP Integrated Lights-Out (iLO) Default Credentials
The remote HP Integrated Lights-Out iLO install uses a default set of credentials 'Admin' / 'Admin' or 'Oper' / 'Oper' to control access to its management interface. With this information, an attacker can gain access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
CVE-2013-6201
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
Code injection
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6201
Unspecified vulnerability in HP Security Management System 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6201
HP Security Management System (SMS) is affected by CVE-2013-6201 for versions 3.3.0, 3.5.0 before patch 1, and 3.6.0 before patch 2. The Security Bulletin indicates remote execution of arbitrary code could be caused by this vulnerability; the exact exploit vectors are not detailed in the provided...
HP Data Protector Backup Client Service Remote Code Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'HP Data Protector Backup Client Service Remote Code Execution', 'Description' = %q This module abuses the Backup Client Service...
HP Data Protector Backup Client Service Remote Code Execution
This Metasploit module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This Metasploit module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2...
[security bulletin] HPSBMU02964 rev.1 - HP Service Manager, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access, Disclosure of Informa
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04117626 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04117626 Version: 1 HPSBMU02964 rev....