DSquare Exploit Pack: D2SEC_HPPCM2

Name| d2sechppcm2 ---|--- CVE| CVE-2013-4811 Exploit Pack| D2ExploitPack Description| HP PCM+ SNAC Registration Server Remote Code Execution Vulnerability Notes|...

DSquare Exploit Pack: D2SEC_HPPCM

Name| d2sechppcm ---|--- CVE| CVE-2013-4812 Exploit Pack| D2ExploitPack Description| HP PCM+ SNAC Registration Server Remote Code Execution Vulnerability Notes|...

CVE-2013-4811

CVE-2013-4811 : A flaw in the HP ProCurve Manager SNAC UpdateDomainControllerServlet allows remote upload of JSP files and arbitrary code execution by manipulating the adCert parameter, affecting PCM 3.20/4.0, PCM+ 3.20/4.0, and IDM 4.0. Public references document a file-upload/path-traversal vul...

HP PCM+ SNAC Registration Server UpdateCertificatesServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateCertificatesServlet. This servlet improperly sanitizes the 'fileName' argument...

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument...

PT-2013-5210 · Hewlett Packard · Hp Procurve Manager +1

Name of the Vulnerable Software and Affected Versions: HP ProCurve Manager versions 3.20 through 4.0 HP ProCurve Manager+ versions 3.20 through 4.0 Identity Driven Manager version 4.0 Description: The issue concerns the UpdateDomainControllerServlet in the SNAC registration server, which fails to...

HP ProCurve Manager SNAC UpdateCertificatesServlet File Upload

This module exploits a path traversal flaw in the HP ProCurve Manager SNAC Server. The vulnerability in the UpdateCertificatesServlet allows an attacker to upload arbitrary files, just having into account binary writes aren't allowed. Additionally, authentication can be bypassed in order to uploa...

HP ProCurve SNAC Domain Controller Credential Dumper

This module will extract Domain Controller credentials from vulnerable installations of HP SNAC as distributed with HP ProCurve 4.00 and 3.20. The authentication bypass vulnerability has been used to exploit remote file uploads. This vulnerability can be used to gather important information handl...

HP ProCurve Manager SNAC UpdateDomainControllerServlet File Upload

This module exploits a path traversal flaw in the HP ProCurve Manager SNAC Server. The vulnerability in the UpdateDomainControllerServlet allows an attacker to upload arbitrary files, just having into account binary writes aren't allowed. Additionally, authentication can be bypassed in order to...

CVE-2012-4349

The CVE-2012-4349 entry concerns a root cause in Symantec Network Access Control (SNAC) 12.1 before RU2, where an unquoted Windows search path could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability is tied to SNAC’s startup path handling, enabling local...

Symantec Endpoint Protection Management Consoles Multiple Issues

SUMMARY The management console in Symantec Endpoint Protection Manager SEPM and Symantec Protection Center SPC for SEP 12.0 Small Business Edition, contains PHP scripts that do not properly validate external input. This could potentially result in remote code execution. Symantec Network Access...

gaim security update

CentOS Errata and Security Advisory CESA-2005:432-01 An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol...

Critical: Red Hat Security Advisory: gaim security update

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

RHEL 2.1 : gaim (RHSA-2005:432)

An updated gaim package that fixes security issues is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A stack based buffer overfl...

Debian DSA-716-1 : gaim - denial of service

It has been discovered that certain malformed SNAC packets sent by other AIM or ICQ users can trigger an infinite loop in Gaim, a multi-protocol instant messaging client, and hence lead to a denial of service of the client. Two more denial of service conditions have been discovered in newer...

[SECURITY] [DSA 716-1] New gaim packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 716-1 [email protected] http://www.debian.org/security/ Martin Schulze April 27th, 2005 http://www.debian.org/security/faq -...

DSA-716-1 gaim - denial of service

Bulletin has no description...

CVE-2005-0472

Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...

CVE-2005-0472

Gaim before 1.1.3 allows remote attackers to cause a denial of service infinite loop via malformed SNAC packets from 1 AIM or 2 ICQ...

Gaim: Multiple Denial of Service issues

Background Gaim is a full featured instant messaging client which handles a variety of instant messaging protocols. Description Specially crafted SNAC packets sent by other instant-messaging users can cause Gaim to loop endlessly CAN-2005-0472. Malformed HTML code could lead to invalid memory...