HP Integrated Lights-Out security vulnerabilities

Crossite scripting, information leakage...

CVE-2013-4843

HP Integrated Lights-Out 4 (iLO4) vulnerability CVE-2013-4843 affects firmware before 1.32. Remote authenticated users may disclose sensitive information via unknown vectors over the network; impact is information disclosure with no confidentiality/integrity changes stated. HP's security bulletin...

CVE-2013-4842

Cross-site scripting XSS vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4843

Unspecified vulnerability in HP Integrated Lights-Out 4 iLO4 with firmware before 1.32 allows remote authenticated users to obtain sensitive information via unknown vectors...

CVE-2013-4842

HP Integrated Lights-Out (iLO4) firmware prior to 1.32 is affected by CVE-2013-4842, a cross-site scripting (XSS) vulnerability that can allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The issue affects HP iLO4 web interface and is identified in multiple vul...

PT-2013-5238 · Hewlett Packard · Hp Integrated Lights-Out 3 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 and 4 iLO3, iLO4 affected versions not specified Description: A Cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. T...

PT-2013-5239 · Hewlett Packard · Hpe Integrated Lights-Out 4 +2

Name of the Vulnerable Software and Affected Versions: HP Integrated Lights-Out 4 iLO4 versions prior to 1.32 HP Integrated Lights-Out 3 iLO3 affected versions not specified Description: The issue allows remote authenticated users to obtain sensitive information via unknown vectors. It could also...

CVE-2013-5781

CVE-2013-5781 affects Oracle PARC Enterprise T4 Servers running Sun System Firmware prior to 8.3.0.b. Local users can impact confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager (ILOM). The description and related sources consistent...

CVE-2013-5781

Unspecified vulnerability in Oracle PARC Enterprise T4 Servers running Sun System Firmware before 8.3.0.b allows local users to affect confidentiality, integrity, and availability via vectors related to Sun System Firmware/Integrated Lights Out Manager ILOM...

CVE-2013-5498

The CVE-2013-5498 issue affects the PPTP-ALG component of Cisco CRS Carrier Grade Services Engine (CGSE) and Cisco ASR 9000 Series ISM running IOS XR. The root cause is in the PPTP-ALG’s handling of packet streams, allowing an unauthenticated, remote attacker to cause a denial of service via craf...

[ThreatFactor NSIA v1.0.6] Network System Integrity Analysis

ThreatFactor NSIA is a website scanner that monitors websites in real-time in order to detect defacements, compliance violations, exploits, sensitive information disclosure and other issues. ThreatFactor detects issues remotely and therefore requires no software to install, does not introduce any...

Integrated circuits can be compromised using Undetectable hardware Trojans

A team of researchers from the U.S. and Europe has developed a Hardware Trojan, which is an undetectable to many techniques, raising the question on need of proper hardware qualification. They released a paper on stealthy Dopant-Level Hardware Trojans, showing how integrated circuits used in...

Integrated circuits can be compromised using Undetectable hardware Trojans

A team of researchers from the U.S. and Europe has developed a Hardware Trojan, which is an undetectable to many techniques, raising the question on need of proper hardware qualification. They released a paper on stealthy Dopant-Level Hardware Trojans, showing how integrated circuits used in...

[OWASP Zed Attack Proxy 2.2.1] Tool for finding vulnerabilities in web applications (Now supports CWE)

OWASP Zed Attack Proxy ZAP An easy to use integrated penetration testing tool for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing...

HP Integrated Lights-Out (iLO) Unspecified Information Disclosure Vulnerability

HP Integrated Lights-Out iLO is prone to an unspecified information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

iLO 3 < 1.50 / iLO 4 < 1.13 Unspecified Information Disclosure

According to its version number, the remote HP Integrated Lights-Out iLO server is affected by an unspecified information disclosure vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69816; scriptversion"1.2"; scriptcvsdate"Date: 2018/07/12 19:01:16";...

Penetration Testing Browser Bundle: PenQ

PenQ is an open source, Linux-based penetration testing browser bundle we built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more. Penetration Testin...

iLO 3 < 1.57 / iLO 4 < 1.22 Unspecified Arbitrary Code Execution

According to its version number and single sign-on settings, the remote HP Integrated Lights-Out iLO server is affected by an arbitrary code execution vulnerability in its web interface. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Sun/Oracle Integrated Lights Out Manager Detection (HTTP)

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Fedora Update for dbus-glib FEDORA-2013-12199

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12199 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...