38 matches found
User Access Manager <= 2.0.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Not patched in 2.0.0 despite what the advisory states. http://www.example.com/wp-admin/admin.php?page=uamusergroup&uamaction=editusergroup&userGroupId=1%22%3E%3Cimg+src%3Dx+onerror%3Dalert%281%29%3E%3C%22...
HP Intelligent Management Center User Access Manager Unspecified Information Disclosure
According to its version number, the HP Intelligent Management Center User Access Manager installed on the remote host is affected by an unspecified information disclosure vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2012-5211
Unspecified vulnerability in HP Intelligent Management Center iMC User Access Manager UAM before 5.2 E0402 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1643...
CVE-2012-5211
Unspecified vulnerability in HP Intelligent Management Center iMC User Access Manager UAM before 5.2 E0402 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1643...
CVE-2012-5211
Unspecified vulnerability in HP Intelligent Management Center iMC User Access Manager UAM before 5.2 E0402 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, aka ZDI-CAN-1643...
HP Intelligent Management Center User Access Manager Datagram Parsing Code Execution
According to its version number, the HP Intelligent Management Center User Access Manager installed on the remote host is affected by a stack-based buffer overflow vulnerability. By sending a specially crafted datagram, a remote, unauthenticated attacker could execute arbitrary code on the remote...
HP Intelligent Management Center User Access Manager unauthorized access
uam.exe buffer overflow...
Stack overflow
Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...
CVE-2012-3274
Stack-based buffer overflow in uam.exe in the User Access Manager UAM component in HP Intelligent Management Center IMC before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data...
CVE-2012-3274
HP IMC UAM (uam.exe) is affected by a stack-based buffer overflow in the UDP data path for log handling, prior to IMC 5.1 E0101P01. The issue can allow remote code execution via specially crafted datagrams, with public references describing exploitation over UDP port 1811 and a patch-based remedi...
HP Intelligent Management Center iNodeMngChecker.exe Buffer Overflow (CVE-2011-1867)
A remote code execution vulnerability has been reported in the HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD. The vulnerability is due to insufficient user input data validation by the application. A remote attacker could exploit this vulnerability by...
CVE-2011-1867
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...
CVE-2011-1867
Summary: CVE-2011-1867 affects HP iNode Management Center. The iNodeMngChecker.exe component is vulnerable to a stack-based buffer overflow when processing a 0x0A0BF007 packet, enabling remote code execution in the SYSTEM context. Affected products are HP Intelligent Management Center (iNode Mana...
CVE-2011-1867
Stack-based buffer overflow in iNodeMngChecker.exe in the User Access Manager UAM 5.0 before SP1 E0101P03 and Endpoint Admission Defense EAD 5.0 before SP1 E0101P03 components in HP Intelligent Management Center aka iNode Management Center allows remote attackers to execute arbitrary code via a...
HP Intelligent Management Center User Access Manager < 5.0 E0101P03 Code Execution Vulnerability
Binary data 5983.prm...
[security bulletin] HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02901775 Version: 1 HPSB3C02687 SSRT100377 rev.1 - HP Intelligent Management Center User Access Manager UAM and Endpoint Admission Defense EAD, Remote Execution of Arbitrary Code NOTICE: The...
