Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2685
HistoryNov 06, 2009 - 3:30 p.m.

CVE-2009-2685

2009-11-0615:30:00
CWE-119
[email protected]
web.nvd.nist.gov
5

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.594

Percentile

97.8%

JSON

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

Affected configurations

Nvd
Node
hppower_manager
VendorProductVersionCPE
hppower_manager*cpe:2.3:a:hp:power_manager:*:*:*:*:*:*:*:*

Related

saint 4
checkpoint_advisories 2
metasploit 1
securityvulns 4
exploitdb 2
cve 1
cvelist 1
zdi 1
d2 1
packetstorm 2
prion 1
openvas 1
nessus 2
saint
saint
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
HP Power Manager Remote Code Execution
2009-11-06 00:00:00
checkpoint_advisories
checkpoint_advisories
Update Protection against HP Power Manager Remote Code Execution
2009-11-19 00:00:00
HP Power Manager Remote Code Execution (CVE-2009-2685)
2010-01-31 00:00:00
metasploit
metasploit
Hewlett-Packard Power Manager Administration Buffer Overflow
2009-11-06 01:31:17
securityvulns
securityvulns
[security bulletin] HPSBMA02474 SSRT090107 rev.2 - HP Power Manager, Remote Execution of Arbitrary Code
2010-01-20 00:00:00
[security bulletin] HPSBMA02474 SSRT090107 rev.1 - HP Power Manager, Remote Execution of Arbitrary Code
2009-11-05 00:00:00
ZDI-09-081: Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability
2009-11-08 00:00:00
exploitdb
exploitdb
Hewlett-Packard (HP) Power Manager Administration Power Manager Administration - Universal Buffer Overflow
2009-11-16 00:00:00
Hewlett-Packard (HP) Power Manager Administration - Remote Buffer Overflow (Metasploit)
2010-11-24 00:00:00
cve
cve
CVE-2009-2685
2009-11-06 15:30:00
cvelist
cvelist
CVE-2009-2685
2009-11-06 15:00:00
zdi
zdi
Hewlett-Packard Power Manager Administration Web Server Stack Overflow Vulnerability
2009-11-05 00:00:00
d2
d2
DSquare Exploit Pack: D2SEC_HPPM
2009-11-06 15:30:00
packetstorm
packetstorm
HP Power Manager Administration Universal Buffer Overflow
2009-11-17 00:00:00
Hewlett-Packard Power Manager Administration Buffer Overflow.
2009-12-31 00:00:00
prion
prion
Stack overflow
2009-11-06 15:30:00
openvas
openvas
HP Power Manager Management Web Server Login RCE Vulnerability
2009-11-13 00:00:00
nessus
nessus
HP Power Manager < 4.2.10
2010-01-21 00:00:00
HP Power Manager < 4.2.10 Multiple Vulnerabilities
2010-01-22 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.594

Percentile

97.8%

JSON
Related for NVD:CVE-2009-2685
saint4checkpoint_advisories2metasploit1securityvulns4exploitdb2cve1cvelist1zdi1d21packetstorm2prion1openvas1nessus2