PT-2009-5080 · Hewlett Packard · Hp Power Manager

Janek Vind · Publicado 2009-11-06 · Atualizado 2018-10-10 · CVE-2009-2685

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Power Manager (affected versions not specified)

Description A stack-based buffer overflow issue exists in the login form of the management web server, allowing remote attackers to execute arbitrary code via the Login variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-2685

Produtos afetados

Hp Power Manager

Referências · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_power_manager_login.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16785 · Exploit
• 🔥 https://exploit-db.com/exploits/10099 · Exploit
• http://securitytracker.com/id?1023140 · Nota
• http://vupen.com/english/advisories/2009/3154 · Aviso do Fabricante
• http://osvdb.org/59684 · Nota
• http://zerodayinitiative.com/advisories/ZDI-09-081 · Nota
• http://securityfocus.com/bid/36933 · Nota
• http://marc.info/?l=bugtraq&m=125744000032141&w=2 · Aviso do Fabricante
• http://secunia.com/advisories/37276 · Aviso do Fabricante
• http://securityfocus.com/archive/1/507708/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2685 · Nota de Segurança