< Back to JetLib.com

jetlib.sec » Tags » intelligent-management

« Expand/Collapse

39 items tagged "intelligent management"

Related tags: udp port 69 [+], com [+], management [+], security [+], imc [+], code revision [+], pr10 [+], port 8080 [+], bulletin [+], zero day [+], user [+], udp port [+], security vulnerabilities [+], secunia [+], potential security vulnerability [+], management center [+], hpsbgn [+], destination buffer [+], arithmetic operation [+], advisory [+], security advisory [+], intelligent [+], code execution [+], exe component [+], zero [+], vulnerability [+], zdi [+], xss [+], safer use [+], multiple [+], hpsb [+], day [+]

September 25, 2011
17:04
3COM/H3C Intelligent Management Center img recv Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: com management intelligent intelligent-management code-execution safer-use

July 03, 2011
16:01
HP Security Bulletin HPSB3C02687 SSRT100377
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSB3C02687 SSRT100377 - A potential security vulnerability has been identified with HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD). The vulnerability could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: hpsb bulletin security potential-security-vulnerability intelligent-management code-revision

16:01
HP Security Bulletin HPSB3C02687 SSRT100377
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSB3C02687 SSRT100377 - A potential security vulnerability has been identified with HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD). The vulnerability could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: potential-security-vulnerability intelligent-management code-revision

16:01
HP Security Bulletin HPSB3C02687 SSRT100377
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSB3C02687 SSRT100377 - A potential security vulnerability has been identified with HP Intelligent Management Center User Access Manager (UAM) and Endpoint Admission Defense (EAD). The vulnerability could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: potential-security-vulnerability intelligent-management code-revision

July 01, 2011
3:06
Secunia Security Advisory 45129
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in HP Intelligent Management Center products, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security intelligent-management security-advisory
June 10, 2011
0:01
Secunia Security Advisory 44748
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in 3Com Intelligent Management Center, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security intelligent-management
June 01, 2011
0:01
Zero Day Initiative Advisory 11-170
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling the a packet type the process uses a user provided length value in an arithmetic operation resulting in integer wrapping. The process then copies user supplied data into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability arithmetic-operation exe-component intelligent-management

0:01
Zero Day Initiative Advisory 11-170
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling the a packet type the process uses a user provided length value in an arithmetic operation resulting in integer wrapping. The process then copies user supplied data into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability arithmetic-operation exe-component intelligent-management

0:01
Zero Day Initiative Advisory 11-170
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-170 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling the a packet type the process uses a user provided length value in an arithmetic operation resulting in integer wrapping. The process then copies user supplied data into a fixed-length buffer on the heap. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: user zero vulnerability arithmetic-operation exe-component intelligent-management

May 11, 2011
16:38
HP Security Bulletin HPSBGN02680 SSRT100361
» ‎ Packet Storm Security Advisories

HP Security Bulletin HPSBGN02680 SSRT100361 - Potential security vulnerabilities have been identified with HP Intelligent Management Center (IMC). The vulnerabilities could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: hpsbgn bulletin security security-vulnerabilities intelligent-management code-revision

16:38
HP Security Bulletin HPSBGN02680 SSRT100361
» ‎ Packet Storm Security Recent Files

HP Security Bulletin HPSBGN02680 SSRT100361 - Potential security vulnerabilities have been identified with HP Intelligent Management Center (IMC). The vulnerabilities could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: hpsbgn bulletin security security-vulnerabilities intelligent-management code-revision

16:38
HP Security Bulletin HPSBGN02680 SSRT100361
» ‎ Packet Storm Security Misc. Files

HP Security Bulletin HPSBGN02680 SSRT100361 - Potential security vulnerabilities have been identified with HP Intelligent Management Center (IMC). The vulnerabilities could be exploited to allow remote execution of arbitrary code. Revision 1 of this advisory.
Tags: hpsbgn bulletin security security-vulnerabilities intelligent-management code-revision

11:00
Bugtraq: ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ZDI-11-165: HP 3COM/H3C Intelligent Management Center tftpserver opcode_table Remote Code Execution Vulnerability
Tags: com management intelligent code-execution intelligent-management zdi

May 10, 2011
21:47
Secunia Security Advisory 44556
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in HP Intelligent Management Center (IMC), which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security intelligent-management security-advisory
11:44
Zero Day Initiative Advisory 11-166
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 514. When handling a syslog packet having a size larger than 2048 bytes the process attempts to exit. An exception handler is called that makes a call into a location that has been previously freed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component udp-port intelligent-management

11:44
Zero Day Initiative Advisory 11-166
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 514. When handling a syslog packet having a size larger than 2048 bytes the process attempts to exit. An exception handler is called that makes a call into a location that has been previously freed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component udp-port intelligent-management

11:44
Zero Day Initiative Advisory 11-166
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-166 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the imcsyslogdm.exe component which listens by default on UDP port 514. When handling a syslog packet having a size larger than 2048 bytes the process attempts to exit. An exception handler is called that makes a call into a location that has been previously freed. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component udp-port intelligent-management

11:43
Zero Day Initiative Advisory 11-165
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-165 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling the opcode word of a packet the process uses this value as a lookup into a function pointer table. The process then calls into the calculated address. By supplying a large or invalid value a remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:43
Zero Day Initiative Advisory 11-165
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-165 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling the opcode word of a packet the process uses this value as a lookup into a function pointer table. The process then calls into the calculated address. By supplying a large or invalid value a remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:43
Zero Day Initiative Advisory 11-165
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-165 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling the opcode word of a packet the process uses this value as a lookup into a function pointer table. The process then calls into the calculated address. By supplying a large or invalid value a remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:43
Zero Day Initiative Advisory 11-164
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-164 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling a TFTP packet type 0x03 or 0x05 (DATA or ERROR) the process blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:43
Zero Day Initiative Advisory 11-164
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-164 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling a TFTP packet type 0x03 or 0x05 (DATA or ERROR) the process blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: udp-port-69 exe-component intelligent-management

11:43
Zero Day Initiative Advisory 11-164
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-164 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling a TFTP packet type 0x03 or 0x05 (DATA or ERROR) the process blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:42
Zero Day Initiative Advisory 11-162
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-162 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. When logging received actions to dbman_debug.log sprintf is used to build the log message. The process does not properly verify the destination buffer on the stack is of sufficient size to handle the newly created string. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component destination-buffer intelligent-management

11:42
Zero Day Initiative Advisory 11-162
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-162 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. When logging received actions to dbman_debug.log sprintf is used to build the log message. The process does not properly verify the destination buffer on the stack is of sufficient size to handle the newly created string. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component destination-buffer intelligent-management

11:42
Zero Day Initiative Advisory 11-162
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-162 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3com/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the dbman.exe component which listens by default on UDP port 2810. When logging received actions to dbman_debug.log sprintf is used to build the log message. The process does not properly verify the destination buffer on the stack is of sufficient size to handle the newly created string. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component destination-buffer intelligent-management

11:42
Zero Day Initiative Advisory 11-161
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-161 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling WRQ opcode types the server allows arbitrary file creation. Additionally, the server is configured to truncate/overwrite existing files. This process is owned by the SYSTEM user. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:42
Zero Day Initiative Advisory 11-161
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-161 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling WRQ opcode types the server allows arbitrary file creation. Additionally, the server is configured to truncate/overwrite existing files. This process is owned by the SYSTEM user. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:42
Zero Day Initiative Advisory 11-161
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-161 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the tftpserver.exe component which listens by default on UDP port 69. When handling WRQ opcode types the server allows arbitrary file creation. Additionally, the server is configured to truncate/overwrite existing files. This process is owned by the SYSTEM user. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability udp-port-69 exe-component intelligent-management

11:41
Zero Day Initiative Advisory 11-160
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 11-160 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling a packet the process uses the packet length field to make a calculation and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component intelligent-management zero-day

11:41
Zero Day Initiative Advisory 11-160
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 11-160 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling a packet the process uses the packet length field to make a calculation and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component intelligent-management zero-day

11:41
Zero Day Initiative Advisory 11-160
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 11-160 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP 3COM/H3C Intelligent Management Center. Authentication is not required to exploit this vulnerability. The flaw exists within the img.exe component which listens by default on TCP port 8800. When handling a packet the process uses the packet length field to make a calculation and blindly copies user supplied data into a fixed-length buffer on the stack. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the SYSTEM user.
Tags: day zero vulnerability exe-component intelligent-management zero-day

May 21, 2010
10:00
Bugtraq: Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center)
» ‎ SecurityFocus Vulnerabilities

Multiple vulnerabilities within 3Com* iMC (Intelligent Management Center)
Tags: multiple imc com intelligent-management management-center

1:00
3Com* iMC (Intelligent Management Center) Various XSS
» ‎ 1337day (was: Inj3ct0r, 1337db)

3Com* iMC (Intelligent Management Center) Various XSS
Tags: management imc com intelligent-management management-center xss
1:00
3Com* iMC (Intelligent Management Center) Unauthenticated File Retrieval
» ‎ 1337day (was: Inj3ct0r, 1337db)

3Com* iMC (Intelligent Management Center) Unauthenticated File Retrieval
Tags: management imc com intelligent-management management-center

0:00
PR10-01.txt
» ‎ Packet Storm Security Recent Files

3Com's iMC (Intelligent Management Centre) provides professional management of 3Com and third party network devices, the IMC is normally accessed using a web browser over port 8080. Procheckup has discovered that the IMC management console is vulnerable to an unauthenticated directory traversal attack within the reporting functionality.
Tags: imc com management intelligent-management pr10 port-8080
0:00
PR10-02.txt
» ‎ Packet Storm Security Recent Files

3Com's iMC (Intelligent Management Centre) provides professional management of 3Com and third party network devices, the IMC is normally accessed using a web browser over port 8080. Various IMC pages are vulnerable to a reflective XSS attack, including the login page. Various pages also disclose information including the SQL sa account password which might be used to assist in carrying out further attacks.
Tags: imc com management intelligent-management pr10 port-8080

0:00
PR10-01.txt
» ‎ Packet Storm Security Exploits

3Com's iMC (Intelligent Management Centre) provides professional management of 3Com and third party network devices, the IMC is normally accessed using a web browser over port 8080. Procheckup has discovered that the IMC management console is vulnerable to an unauthenticated directory traversal attack within the reporting functionality.
Tags: imc com management intelligent-management pr10 port-8080
0:00
PR10-02.txt
» ‎ Packet Storm Security Exploits

3Com's iMC (Intelligent Management Centre) provides professional management of 3Com and third party network devices, the IMC is normally accessed using a web browser over port 8080. Various IMC pages are vulnerable to a reflective XSS attack, including the login page. Various pages also disclose information including the SQL sa account password which might be used to assist in carrying out further attacks.
Tags: imc com management intelligent-management pr10 port-8080