[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities

Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04765115 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04765115 Version: 1 HPSBMU03396 rev.1 - HP Version Control Repository Manager VCR...

HP Version Control Repository Manager multiple security vulnerabilities

Information disclosure, DoS, unauthorized access, buffer overflow, privilege escalation, crossite scripting...

HP Version Control Repository Manager < 7.5.0 Multiple Vulnerabilities (HPSBMU03396) (FREAK)

The version of HP Version Control Repository Manager VCRM installed on the remote Windows host is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A NULL pointer dereference flaw exists when the SSLv3 option isn't enabled and an SSLv3 ClientHello is received. This allows...

HP Version Control Repository Manager Linux Detection (credentialed check)

HP Version Control Repository Manager, a software version management application, is installed on the remote Linux host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid85804; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/01/09"...

HP Version Control Repository Manager Cross-Site Request Forgery Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A cross-site request forgery vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to hijack the...

HP Version Control Repository Manager Buffer Overflow Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A buffer overflow vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. This could allow an authenticated remote user to modify data via...

HP Version Control Repository Manager Information Disclosure Vulnerability (CNVD-2015-05736)

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to obtain sensitive...

HP Version Control Repository Manager Denial of Service Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. A denial of service vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. This could allow an authenticated remote user to execute arbitrary...

HP Version Control Repository Manager Information Disclosure Vulnerability

HP Version Control Repository Manager is a set of version control repository management products from Hewlett-Packard HP. An information disclosure vulnerability exists in HP Version Control Repository Manager versions prior to 7.5.0. It allows an authenticated remote user to gain privileges and...

CVE-2015-5413

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2015-5411

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified vectors...

Design/Logic Flaw

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

Buffer overflow

Buffer overflow in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors...

CVE-2015-5410

HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of service via unspecified vectors...

CVE-2015-5412

Cross-site request forgery CSRF vulnerability in HP Version Control Repository Manager VCRM before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5411

CVE-2015-5411 affects HP Version Control Repository Manager (VCRM) prior to 7.5.0, enabling remote authenticated users to obtain sensitive information via unspecified vectors. The vulnerability is part of multiple issues documented in HP’s HPSBMU03396 bulletin; remediation is to upgrade to VCRM 7...

[SECURITY] [DSA 3331-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3331-1 [email protected] https://www.debian.org/security/ Stefan Fritsch August 10, 2015 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3331-1] subversion security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3331-1 [email protected] https://www.debian.org/security/ Stefan Fritsch August 10, 2015 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3331-1 (subversion - security update)

Several security issues have been found in the server components of the version control system subversion. CVE-2015-3184 Subversion OpenVAS Vulnerability Test $Id: deb3331.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3331-1 using nvtgen 1.0 Script version: 1.0 Author...

[SECURITY] Fedora 21 Update: subversion-1.8.13-7.fc21

Subversion is a concurrent version control system which enables one or more users to collaborate in developing and maintaining a hierarchy of files and directories while keeping a history of all changes. Subversion only stores the differences between versions, instead of every complete file...