CVE-2009-2685

HP Power Manager 4.x is affected by CVE-2009-2685 due to a stack-based buffer overflow in the login form of the management web server. The issue arises from insufficient bounds checking on the Login parameter, allowing remote attackers to execute arbitrary code (typically as SYSTEM) via a crafted...

CVE-2010-4113

HP Power Manager (HPPM) – A stack-based buffer overflow in the web management login form allows remote code execution via a specially crafted Login parameter, affecting versions before 4.3.2. The issue stems from a boundary error when processing URL/login input. Remediation: upgrade to HP Power M...

CVE-2011-0277

HP Power Manager (HPPM)

CVE-2009-3999

HP Power Manager prior to version 4.2.10 is affected by CVE-2009-3999 due to a stack-based buffer overflow in goform/formExportDataLogs triggered by a long fileName parameter. This allows remote code execution. Exploitation has public PoCs and modules (e.g., Metasploit/Exploit-DB references), ind...

CVE-2009-4000

HP Power Manager vulnerable to a directory traversal issue in goform/formExportDataLogs (fileName parameter) that allows remote attackers to overwrite arbitrary files and potentially execute arbitrary code. Affected software: HP Power Manager versions before 4.2.10. Root cause: input validation e...

CVE-2011-0280

CVE-2011-0280 affects HP Power Manager (HPPM)