Lucene search
FlexeraCVE-2009-3999HistoryJan 20, 2010 - 10:30 p.m.
CVE-2009-3999
2010-01-2022:30:00
CWE-119
flexera
web.nvd.nist.gov
30
cve-2009-3999
stack-based buffer overflow
hp power manager
remote code execution
nvd
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0.937
Percentile
99.2%
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
Affected configurations
Node
hppower_managerRange≤4.2.9
ORhppower_managerMatch4.2.5
ORhppower_managerMatch4.2.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| hp | power_manager | * | cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:* |
| hp | power_manager | 4.2.5 | cpe:2.3:a:hp:power_manager:4.2.5:*:*:*:*:*:*:* |
| hp | power_manager | 4.2.6 | cpe:2.3:a:hp:power_manager:4.2.6:*:*:*:*:*:*:* |
Related
d2
d2
DSquare Exploit Pack: D2SEC_HPPM2
2010-01-20 22:30:00
saint
saint
HP Power Manager formExportDataLogs buffer overflow
2010-01-22 00:00:00
HP Power Manager formExportDataLogs buffer overflow
2010-01-22 00:00:00
HP Power Manager formExportDataLogs buffer overflow
2010-01-22 00:00:00
exploitdb
exploitdb
securityvulns
securityvulns
Secunia Research: HP Power Manager "formExportDataLogs" Buffer Overflow
2010-01-20 00:00:00
[security bulletin] HPSBMA02485 SSRT090252 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code
2010-01-20 00:00:00
HP Power Manager code execution
2010-01-21 00:00:00
cvelist
cvelist
CVE-2009-3999
2010-01-20 22:00:00
nvd
nvd
CVE-2009-3999
2010-01-20 22:30:00
zdt
zdt
HP Power Manager 'formExportDataLogs' Buffer Overflow
2011-10-19 00:00:00
checkpoint_advisories
checkpoint_advisories
HP Power Manager formExportDataLogs Buffer Overflow (CVE-2009-3999)
2010-03-22 00:00:00
metasploit
metasploit
HP Power Manager 'formExportDataLogs' Buffer Overflow
2011-10-20 17:29:48
packetstorm
packetstorm
HP Power Manager 'formExportDataLogs' Buffer Overflow
2011-10-20 00:00:00
prion
prion
Stack overflow
2010-01-20 22:30:00
openvas
openvas
HP Power Manager Multiple RCE Vulnerabilities
2010-01-20 00:00:00
HP Power Manager Multiple Remote Code Execution Vulnerabilities
2010-01-20 00:00:00
nessus
nessus
HP Power Manager < 4.2.10
2010-01-21 00:00:00
HP Power Manager < 4.2.10 Multiple Vulnerabilities
2010-01-22 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.8
Confidence
High
EPSS
0.937
Percentile
99.2%
Related for CVE-2009-3999