CVE-2012-5200

HP iMC/ANM products (HP iMC Standard/Enterprise Edition and ANM) prior to 5.2 E0401 are affected by CVE-2012-5200 (XSS) via topoContent.jsf; remote authenticated users can inject arbitrary web script/HTML. The HP security bulletin (HPSB) and NASL entry associate CVE-2012-5200 with an XSS vulnerab...

CVE-2012-5209

CVE-2012-5209 is an HP iMC/ANM remote-code-execution vulnerability (ZDI-CAN-1659) affecting HP iMC before 5.2 E0401. Connected sources specify the flaw in the flexFileUpload servlet leading to RCE. HP released fixes in 5.2 E0401 (Standard/Enterprise, ANM, TAM/UAM as applicable). CVSS v2 base scor...

CVE-2012-5203

CVE-2012-5203 in HP Intelligent Management Center (iMC) and iMC for ANM (pre-5.2 E0401) is an information-disclosure vulnerability exploitable via a ReportImgServlet directory-traversal. The issue arises from lack of authentication and insufficient input validation in ReportImgServlet when proces...

CVE-2012-5210

HP iMC TACACS+ Authentication Manager (TAM) tamServletDownload vulnerability (CVE-2012-5210) is a directory-traversal flaw disclosed by ZDI-CAN-1646, enabling remote attackers to read files readable by SYSTEM and potentially disclose credentials. The issue affects TAM add-in module prior to 5.2 E...

CVE-2012-5205

HP iMC/ANM (HP Intelligent Management Center and HP iMC for Automated Network Manager) before 5.2 E0401 contains multiple CVEs including CVE-2012-5205, enabling remote attackers to obtain sensitive information, modify data, or cause DoS via unspecified vectors. The connected materials corroborate...

CVE-2012-5208

CVE-2012-5208 affects HP Intelligent Management Center (iMC) and iMC for ANM prior to 5.2 E0401. The connected sources identify this as an information-disclosure vulnerability (remote, via unknown vectors per ZDI-1615) that could allow an attacker to obtain sensitive information. The issue is emb...

[security bulletin] HPSB3C02831 SSRT100661 rev.1 - HP Intelligent Management Center User Access Manager (UAM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03589863 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03589863 Version: 1 HPSB3C02831...

CVE-2012-3274

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

Stack overflow

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

CVE-2012-3274

HP IMC UAM (uam.exe) is affected by a stack-based buffer overflow in the UDP data path for log handling, prior to IMC 5.1 E0101P01. The issue can allow remote code execution via specially crafted datagrams, with public references describing exploitation over UDP port 1811 and a patch-based remedi...

CVE-2012-3274

Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...

HP Intelligent Management Center UAM - Remote Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Intelligent Management Center UAM...

HP Intelligent Management Center UAM Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'HP Intelligent Management Center UAM...

Integer overflow

Multiple unspecified vulnerabilities in HP Intelligent Management Center IMC before 5.0 E0101P05 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by an integer overflow and heap-based buffer overflow in img.exe for a crafted message packet...

CVE-2012-3253

Affected product/version: HP Intelligent Management Center (IMC) prior to 5.0 E0101P05. Vulnerability details: remote attackers can execute arbitrary code via crafted input, demonstrated by an integer overflow and a heap-based buffer overflow in img.exe when processing a crafted message packet. R...

HP Intelligent Management Center UAM Buffer Overflow

This module exploits a remote buffer overflow in HP Intelligent Management Center UAM. The vulnerability exists in the uam.exe component, when using sprint in a insecure way for logging purposes. The vulnerability can be triggered by sending a malformed packet to the 1811/UDP port. The module has...

HP Intelligent Management Center img Buffer Overflow (CVE-2011-1848)

HP Intelligent Management Center IMC is a stand-alone, comprehensive management platform developed by HP that delivers integrated and modular network management capabilities. IMC Enterprise Edition is designed on a service-oriented architecture SOA using a business application flow model as the...

HP Intelligent Management Center Endpoint Admission Defense < 5.0 E0101P03 Code Execution Vulnerability

Binary data 5984.prm...

HP Intelligent Management Center Multiple Vulnerabilities

The version of HP Intelligent Management Center running on the remote host contains a number of vulnerabilities that can be exploited remotely without authentication, including code execution and arbitrary file creation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if !definedfunc"xmlpars...

CVE-2011-2331

Integer overflow in img.exe in HP Intelligent Management Center IMC allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer overflow, possibly related to an "recv" field...