Kaseya's agent driver contains NULL pointer dereference

Overview Kaseya's agent driver, kapfa.sys, is vulnerable to a NULL pointer dereference. Description CWE-476: NULL Pointer Dereference Kaseya's agent driver, kapfa.sys, is vulnerable to a NULL pointer dereference. --- Impact A local authenticated attacker may be able to cause a denial-of-service...

HP VSA Remote Command Execution Exploit

No description provided by source...

HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager RCE

The remote HP storage system running LeftHand OS is affected by an unspecified remote arbitrary code execution vulnerability in the dbdmanager component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73463;...

CVE-2013-6211

Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance VSA before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or...

CVE-2013-6211

HP StoreOnce family (VSA up to 3.7.2; 2610/2620/4210 iSCSI backups up to 3.9.0; 4210 FC/4220/4420/4430 backups up to 3.9.0) contains CVE-2013-6211, a remote vulnerability allowing an attacker to obtain sensitive information or cause a denial of service. HP’s Security Bulletin HPSBST02968 rev.1 li...

CVE-2013-6211

Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance VSA before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or...

[security bulletin] HPSBST02937 rev.1 - HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03995204 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03995204 Version: 1 HPSBST02937 rev....

CVE-2013-4841

Unspecified vulnerability in dbdmanager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software formerly LeftHand Virtual SAN Appliance allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1509...

CVE-2013-4841

HP StoreVirtual 4000 and StoreVirtual VSA Software (LeftHand OS) suffer a remote code execution in the dbd_manager component prior to LeftHand OS 11.0. The vulnerability (CVE-2013-4841) allows unauthenticated, remote attackers to execute arbitrary code with root privileges by sending crafted mess...

HP LeftHand Virtual SAN Appliance hydra Ping Hostname Overflow

Added: 09/19/2013 CVE: CVE-2012-3285 BID: 57754 OSVDB: 89919 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...

HP LeftHand Virtual SAN Appliance Hydra Service Login Buffer Overflow

Added: 08/20/2013 CVE: CVE-2013-2343 BID: 60884 OSVDB: 94701 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...

HP LeftHand Virtual SAN Appliance Hydra Service Login Buffer Overflow

Added: 08/20/2013 CVE: CVE-2013-2343 BID: 60884 OSVDB: 94701 Background HP LeftHand Virtual SAN Appliance VSA software is a VMware certified SAN/storage device and virtual appliance that provides complete SAN functionality for VMware Infrastructure without external SAN hardware. Problem HP LeftHa...

HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow

This Metasploit module exploits a buffer overflow vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 10.0. The vulnerability is due to an insecure usage of the sscanf function when parsing login requests. This Metasploit module has been tested successfully on the HP VSA 9...

HP StorageWorks P4000 Virtual SAN Appliance Login Buffer Overflow

This module exploits a buffer overflow vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 10.0. The vulnerability is due to an insecure usage of the sscanf function when parsing login requests. This module has been tested successfully on the HP VSA 9 Virtual Appliance. This...

CVE-2013-2220

Buffer overflow in the radiusgetvendorattr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large Vendor Specific Attributes VSA length value...

[security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03825537 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03825537 Version: 1 HPSBST02896 rev....

Veeam Backup & Replication - HP San Setup Guide

Challenge Veeam Explorer for SAN Snapshots lets you perform Veeam restores of entire VMs or individual items directly from HP StoreVirtual VSA and LeftHand snapshots. And like Explorer for Exchange, it's included in all editions of Veeam Backup & Replication. Cause This is a how-to guide on...

HP StorageWorks P4000 Virtual SAN Appliance Command Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "HP StorageWorks...

HP StorageWorks P4000 Virtual SAN Appliance Command Execution

This module exploits a vulnerability found in HP's StorageWorks P4000 VSA on versions prior to 9.5. By using a default account credential, it is possible to inject arbitrary commands as part of a ping request via port 13838. This module requires Metasploit: https://metasploit.com/download Current...

HP VSA Command Execution

!/usr/bin/python ''' ================================== Pseudo documentation ================================== ''' HP VSA / SANiQ Hydra client Nicolas Grégoire v0.5 ''' ================================== Target information ================================== ''' HOST = '192.168.201.11' The remote...