CVE-2012-5210

HP iMC TACACS+ Authentication Manager (TAM) tamServletDownload vulnerability (CVE-2012-5210) is a directory-traversal flaw disclosed by ZDI-CAN-1646, enabling remote attackers to read files readable by SYSTEM and potentially disclose credentials. The issue affects TAM add-in module prior to 5.2 E...

CVE-2012-5213

CVE-2012-5213 is an information-disclosure vulnerability in HP Intelligent Management Center (iMC) and iMC for ANM prior to version 5.2 E0401 (aka ZDI-CAN-1662). Exploitation would allow remote attackers to obtain sensitive information via unknown vectors. HP’s security bulletin and related NASL ...

CVE-2012-5206

CVE-2012-5206 affects HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) prior to 5.2 E0401. The vulnerability enables remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors (ZDI-CAN...

CVE-2012-5208

CVE-2012-5208 affects HP Intelligent Management Center (iMC) and iMC for ANM prior to 5.2 E0401. The connected sources identify this as an information-disclosure vulnerability (remote, via unknown vectors per ZDI-1615) that could allow an attacker to obtain sensitive information. The issue is emb...

CVE-2012-5200

HP iMC/ANM products (HP iMC Standard/Enterprise Edition and ANM) prior to 5.2 E0401 are affected by CVE-2012-5200 (XSS) via topoContent.jsf; remote authenticated users can inject arbitrary web script/HTML. The HP security bulletin (HPSB) and NASL entry associate CVE-2012-5200 with an XSS vulnerab...

CVE-2012-5209

CVE-2012-5209 is an HP iMC/ANM remote-code-execution vulnerability (ZDI-CAN-1659) affecting HP iMC before 5.2 E0401. Connected sources specify the flaw in the flexFileUpload servlet leading to RCE. HP released fixes in 5.2 E0401 (Standard/Enterprise, ANM, TAM/UAM as applicable). CVSS v2 base scor...

CVE-2012-5203

CVE-2012-5203 in HP Intelligent Management Center (iMC) and iMC for ANM (pre-5.2 E0401) is an information-disclosure vulnerability exploitable via a ReportImgServlet directory-traversal. The issue arises from lack of authentication and insufficient input validation in ReportImgServlet when proces...

CVE-2012-5205

Unspecified vulnerability in HP Intelligent Management Center iMC and Intelligent Management Center for Automated Network Manager ANM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1650...

CVE-2012-5204

CVE-2012-5204 affects HP Intelligent Management Center (iMC) and related ANM modules. The connected documentation confirms a directory traversal in the IctDownloadServlet that enables an unauthenticated attacker to retrieve arbitrary files with SYSTEM privileges, leading to information disclosure...

CVE-2012-5212

HP iMC (Intelligent Management Center) and ANM prior to 5.2 E0401 are affected by CVE-2012-5212, a vulnerability in which remote attackers may obtain sensitive information, modify data, or cause a denial of service via unknown vectors (ZDI-CAN-1663). Multiple third‑party advisories (ZDI, OpenVAS,...

CVE-2012-5201

HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) prior to 5.2 E0401 are affected by an unspecified remote code execution vulnerability (CVE-2012-5201). Multiple connected sources indicate the flaw relates to the mibFileUpload component a...

CVE-2012-5205

HP iMC/ANM (HP Intelligent Management Center and HP iMC for Automated Network Manager) before 5.2 E0401 contains multiple CVEs including CVE-2012-5205, enabling remote attackers to obtain sensitive information, modify data, or cause DoS via unspecified vectors. The connected materials corroborate...

CVE-2012-5211

CVE-2012-5211 affects HP Intelligent Management Center (iMC) User Access Manager (UAM) prior to 5.2 E0402. The vulnerability allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors (ZDI-CAN-1643). Connected sources corroborate an info...

CVE-2012-5210

Unspecified vulnerability in HP Intelligent Management Center iMC TACACS+ Authentication Manager TAM before 5.2 E0401 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1646...

CVE-2012-5202

CVE-2012-5202 is an information disclosure vulnerability in HP Intelligent Management Center (iMC) and ANM/FaultDownloadServlet prior to 5.2 E0401. The issue arises from a directory traversal vulnerability that, per the Metasploit module, allows unauthenticated attackers to access arbitrary files...

[security bulletin] HPSB3C02831 SSRT100661 rev.1 - HP Intelligent Management Center User Access Manager (UAM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03589863 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03589863 Version: 1 HPSB3C02831...

CVE-2012-3274

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

Stack overflow

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

CVE-2012-3274

HP IMC UAM (uam.exe) is affected by a stack-based buffer overflow in the UDP data path for log handling, prior to IMC 5.1 E0101P01. The issue can allow remote code execution via specially crafted datagrams, with public references describing exploitation over UDP port 1811 and a patch-based remedi...

CVE-2012-3274

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...