CVE-2011-1854

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1849

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to create or overwrite files, and subsequently execute arbitrary code, via a crafted WRQ request...

CVE-2011-1848

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1848 due to a stack-based buffer overflow in the img.exe component when processing a crafted length field in a packet, allowing remote code execution. Red Hat and other advisories reiterate this vulnerability in IM...

CVE-2011-1852

HP IMC 5.0 before E0101L02 is affected by CVE-2011-1852 due to multiple stack-based buffer overflows in tftpserver.exe when handling DATA or ERROR TFTP packets, allowing remote arbitrary-code execution. The vulnerability is documented across HP’s security bulletin and multiple advisories; HP list...

CVE-2011-1849

HP Intelligent Management Center (IMC) 5.0 before E0101L02 is affected by CVE-2011-1849 in tftpserver.exe, enabling remote attackers to create/overwrite files and potentially execute arbitrary code via a crafted WRQ request. The vulnerability is part of a family of IMC issues (CVE-2011-1848 to CV...

CVE-2011-1851

CVE-2011-1851 affects HP Intelligent Management Center (IMC) 5.0 before E0101L02. The vulnerability is a stack-based buffer overflow in the tftpserver.exe component triggered by a long mode field in received TFTP packets, enabling remote code execution in the security context of the service. Red ...

CVE-2011-1850: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the logging functionality in dbman.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via vectors related to a received action...

CVE-2011-1848: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in img.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a crafted length field in a packet...

CVE-2011-1854: Undefined Security Weakness

Use-after-free vulnerability in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a long syslog packet, related to an exception handler...

CVE-2011-1852: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allow remote attackers to execute arbitrary code via crafted packet content accompanying a 1 DATA or 2 ERROR opcode...

CVE-2011-1853: Improper Input Validation

tftpserver.exe in HP Intelligent Management Center IMC 5.0 before E0101L02 allows remote attackers to execute arbitrary code via a 1 large or 2 invalid opcode field, related to a function pointer table...

[security bulletin] HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center (IMC), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02822750 Version: 1 HPSBGN02680 SSRT100361 rev.1 - HP Intelligent Management Center IMC, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon ...

HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 51...

HP 3COM/H3C Intelligent Management Center dbman sprintf Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. Wh...

HP 3COM/H3C Intelligent Management Center tftpserver DATA/ERROR Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69...

PR10-02: Various XSS and information disclosure flaws within 3Com* iMC (Intelligent Management Center)

PR10-02: Various XSS and information disclosure flaws within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 29th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity:...

3Com Intelligent Management Center multiple security vulnerabilities

Directory traversal, crossite scripting...

PR10-01: Unauthenticated File Retrieval (traversal) within 3Com* iMC (Intelligent Management Center)

PR10-01: Unauthenticated File Retrieval traversal within 3Com iMC Intelligent Management Center On the 12th April 2010 Hewlett Packard completed its acquisition of 3Com Vulnerability found: 30th January 2010 Vendor informed: 1st February 2010 Vulnerability fixed: 13th May 2010 Severity: High...

Cross site scripting

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...

CVE-2010-2103

Cross-site scripting XSS vulnerability in axis2-admin/axis2-admin/engagingglobally in the administration console in Apache Axis2/Java 1.4.1, 1.5.1, and possibly other versions, as used in SAP Business Objects 12, 3com IMC, and possibly other products, allows remote attackers to inject arbitrary w...