PT-2009-5080 · Hewlett Packard · Hp Power Manager

Janek Vind · Published 2009-11-06 · Updated 2018-10-10 · CVE-2009-2685

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Power Manager (affected versions not specified)

Description A stack-based buffer overflow issue exists in the login form of the management web server, allowing remote attackers to execute arbitrary code via the Login variable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-2685

Affected Products

Hp Power Manager

References · 12

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_power_manager_login.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16785 · Exploit
• 🔥 https://exploit-db.com/exploits/10099 · Exploit
• http://vupen.com/english/advisories/2009/3154 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=125744000032141&w=2 · Vendor Advisory
• http://secunia.com/advisories/37276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2685 · Security Note
• http://securitytracker.com/id?1023140 · Note
• http://osvdb.org/59684 · Note
• http://zerodayinitiative.com/advisories/ZDI-09-081 · Note
• http://securityfocus.com/bid/36933 · Note
• http://securityfocus.com/archive/1/507708/100/0/threaded · Note