| |||||||||||||
| Test Kennung: | 1.3.6.1.4.1.25623.1.0.100457 |
| Kategorie: | Web application abuses |
| Titel: | HP Power Manager Multiple Remote Code Execution Vulnerabilities |
| Zusammenfassung: | Determine if HP Power Manager version is < 4.2.10 |
| Beschreibung: | Overview: HP Power Manager is prone to multiple remote code-execution vulnerabilities because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete compromise of the affected computer. Failed exploit attempts will result in a denial-of-service condition. Versions prior to Power Manager 4.2.10 are affected. Solution: The vendor has released updates and an advisory. Please see the references for details. References: http://www.securityfocus.com/bid/37866 http://www.securityfocus.com/bid/37867 http://www.securityfocus.com/bid/37873 http://h18000.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/index.html http://h18004.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/dl/HPPM_Windows_Readme4210_Eng.zip http://www.securityfocus.com/archive/1/509042 |
| Querverweis: |
BugTraq ID: 37866 BugTraq ID: 37867 BugTraq ID: 37873 Common Vulnerability Exposure (CVE) ID: CVE-2009-3999 http://secunia.com/secunia_research/2009-47/ HPdes Security Advisory: HPSBMA02485 http://marc.info/?l=bugtraq&m=126393370331959&w=2 HPdes Security Advisory: SSRT090252 http://www.securityfocus.com/bid/37867 http://securitytracker.com/id?1023470 http://secunia.com/advisories/37280 http://securityreason.com/securityalert/8482 Common Vulnerability Exposure (CVE) ID: CVE-2009-4000 http://secunia.com/secunia_research/2009-48/ http://www.securityfocus.com/bid/37873 |
| Copyright | This script is Copyright (C) 2010 Greenbone Networks GmbH |
| Dies ist nur einer von 32582 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten. |
|