HP Network Automation RMI Registry Java Object Deserialization RCE

The HP Network Automation application running on the remote host is version 9.1x, 9.2x, 10.00.x prior to 10.00.02.01, 10.10.x, or 10.11.x prior to 10.11.00.01. It is, therefore, affected by a remote code execution vulnerability in the RMI registry due to unsafe deserialize calls of unauthenticate...

CVE-2016-5995

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program...

CVE-2016-5995

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program...

Design/Logic Flaw

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program...

CVE-2016-5995

Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program...

CVE-2016-5995

CVE-2016-5995 affects IBM DB2: Untrusted search path allow local privilege escalation via a Trojan horse library loaded by setuid/setgid binaries. Affected DB2 releases on Linux/AIX/HP-UX include 9.7 FP11, 10.1 FP5, 10.5 before FP8, and 11.1 GA. IBM remediation varies by release (e.g., 9.7 FP11 s...

HP Performance Center Detect

Binary data hpperformancecenterinstalled.nbin...

HP Network Automation Local Security Bypass Vulnerability

HP Network Automation is a suite of automated network configuration management tools from Hewlett-Packard HP. The tool automates configuration changes, software updates, compliance audits, and tracking and control of widely distributed, multi-vendor network devices. A local security bypass...

HP Performance Center 11.52.x / 12.x < 12.53 Multiple Vulnerabilities

The version of HP Performance Center installed on the remote Windows host is 11.52.x or 12.x prior to 12.53. It is, therefore, affected by multiple vulnerabilities : - An overflow condition exists in mchan.dll due to a failure to validate the size of a user-supplied string prior to copying it to ...

CVE-2016-4385

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

Design/Logic Flaw

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

CVE-2016-4385

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

CVE-2016-4385

CVE-2016-4385 affects HP Network Automation: RMI registry deserialization in 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 enables remote code execution via a crafted serialized Java object, leveraging Apache Commons Collections and Commons BeanUtils libraries. The vulnerabil...

CVE-2016-4385

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

CVE-2016-4385: Deserialization of Untrusted Data

The RMI service in HP Network Automation Software 9.1x, 9.2x, 10.0x before 10.00.02.01, and 10.1x before 10.11.00.01 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC and Commons BeanUtils libraries...

HPSBHF3550 rev. 2 - HP ThinPro Keyboard Layout Control Panel and Virtual Keyboard Application Vulnerability

Potential Security Impact Local unauthorized access and unintentional elevation of privilege on a HP thin client device. VULNERABILITY SUMMARY A potential security vulnerability has been identified with the keyboard layout control panel and virtual keyboard application on HP ThinPro operating...

HP Network Automation Java Deserialization Remote Code Execution Vulnerability

HP Network Automation automates the entire operational lifecycle of network devices, from configuration to policy-based change management, compliance, and security management. A remote code execution vulnerability exists in HP Network Automation, which could be exploited by an attacker to execute...

HP Intelligent Management Center (iMC) Detection (Windows SMB Login)

Detects the installed version of HP Intelligent Management Center iMC. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

HP Intelligent Management Center (iMC) Multiple Vulnerabilities

HP Intelligent Management Center iMC is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2016-5930

Name of the Vulnerable Software and Affected Versions HP Network Automation Software versions 9.1x through 9.2x HP Network Automation Software versions 10.0x through 10.00.02.00 HP Network Automation Software versions 10.1x through 10.10.99.99 Description The issue allows remote attackers to...