Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2009-2685
HistoryNov 06, 2009 - 3:30 p.m.

CVE-2009-2685

2009-11-0615:30:00
CWE-119
mitre
web.nvd.nist.gov
45
cve-2009-2685
stack-based buffer overflow
hp power manager
remote code execution
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

0.594

Percentile

97.8%

JSON

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

Affected configurations

Nvd
Node
hppower_manager
VendorProductVersionCPE
hppower_manager*cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*

Related

d2 1
prion 1
zdi 1
packetstorm 2
exploitdb 2
saint 4
checkpoint_advisories 2
securityvulns 4
openvas 1
metasploit 1
nvd 1
cvelist 1
nessus 2
d2
d2
DSquare Exploit Pack: D2SEC_HPPM
2009-11-06 15:30:00
prion
prion
Stack overflow
2009-11-06 15:30:00
zdi
zdi
Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability
2009-11-05 00:00:00
packetstorm
packetstorm
HP Power Manager Administration Universal Buffer Overflow
2009-11-17 00:00:00
Hewlett-Packard Power Manager Administration Buffer Overflow.
2009-12-31 00:00:00
exploitdb
exploitdb
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
2010-11-24 00:00:00
Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow
2009-11-16 00:00:00
saint
saint
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
checkpoint_advisories
checkpoint_advisories
HP Power Manager Remote Code Execution (CVE-2009-2685)
2010-01-31 00:00:00
Update Protection against HP Power Manager Remote Code Execution
2009-11-19 00:00:00
securityvulns
securityvulns
[security bulletin] HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code
2010-01-20 00:00:00
[security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code
2009-11-05 00:00:00
ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability
2009-11-08 00:00:00
openvas
openvas
HP Power Manager Management Web Server Login RCE Vulnerability
2009-11-13 00:00:00
metasploit
metasploit
Hewlett-Packard Power Manager Administration Buffer Overflow
2009-11-06 01:31:17
nvd
nvd
CVE-2009-2685
2009-11-06 15:30:00
cvelist
cvelist
CVE-2009-2685
2009-11-06 15:00:00
nessus
nessus
HP Power Manager < 4.2.10
2010-01-21 00:00:00
HP Power Manager < 4.2.10 Multiple Vulnerabilities
2010-01-22 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

0.594

Percentile

97.8%

JSON
Related for CVE-2009-2685
d21prion1zdi1packetstorm2exploitdb2saint4checkpoint_advisories2securityvulns4openvas1metasploit1nvd1cvelist1nessus2