CVE-2011-1854

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1854

CVE-2011-1854 is an HP IMC 5.0 vulnerability (before E0101L02) in the imcsyslogdm.exe component, where processing oversized syslog packets triggers a use-after-free and remote code execution. The issue is documented by multiple sources (NVD entry, Red Hat advisory, Nessus plugin HP_IMC_MULTIPLE_C...

CVE-2011-1853

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is vulnerable to CVE-2011-1853 via tftpserver.exe, where handling a large or invalid opcode field (related to a function pointer table) can allow remote arbitrary code execution. Affected product line: HP IMC 5.0 (E0101) and earlier; impa...

CVE-2011-1852

HP IMC 5.0 before E0101L02 is affected by CVE-2011-1852 due to multiple stack-based buffer overflows in tftpserver.exe when handling DATA or ERROR TFTP packets, allowing remote arbitrary-code execution. The vulnerability is documented across HP’s security bulletin and multiple advisories; HP list...

CVE-2011-1848

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1848 due to a stack-based buffer overflow in the img.exe component when processing a crafted length field in a packet, allowing remote code execution. Red Hat and other advisories reiterate this vulnerability in IM...

CVE-2011-1851

CVE-2011-1851 affects HP Intelligent Management Center (IMC) 5.0 before E0101L02. The vulnerability is a stack-based buffer overflow in the tftpserver.exe component triggered by a long mode field in received TFTP packets, enabling remote code execution in the security context of the service. Red ...

CVE-2011-1854: Undefined Security Weakness

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action...

CVE-2011-1853: Improper Input Validation

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

CVE-2011-1848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allow remote attackers to execute arbitrary code via crafted packet content accompanying a 1 DATA or 2 ERROR opcode...

[security bulletin] HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center (IMC), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02822750 Version: 1 HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center IMC, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon ...

PT-2011-3411

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC version 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the logging functionality of dbman.exe. This allows remote attackers to execute arbitrary code. The...

PT-2011-3409

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the img.exe component. This can be exploited by remote attackers to execute arbitrary code via a crafted...

PT-2011-3410

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to create or overwrite files and subsequently execute arbitrary code via a crafted WRQ request to the tftpserver.exe in HP...

PT-2011-3412

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue is related to a stack-based buffer overflow in the tftpserver.exe component. This allows remote attackers to execute arbitrary code via a long mode field...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

PT-2011-3414

Name of the Vulnerable Software and Affected Versions HP Intelligent Management Center IMC versions 5.0 before E0101L02 Description The issue allows remote attackers to execute arbitrary code via a large or invalid opcode field, related to a function pointer table in tftpserver.exe. Recommendatio...