ID de Prueba:	1.3.6.1.4.1.25623.1.0.100457
Categoría:	Web application abuses
Título:	HP Power Manager Multiple RCE Vulnerabilities
Resumen:	HP Power Manager is prone to multiple remote code execution (RCE) vulnerabilities;because it fails to properly bounds-check user-supplied data.;;An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete;compromise of the affected computer. Failed exploit attempts will result in a denial-of-service condition.;;Versions prior to Power Manager 4.2.10 are affected.
Descripción:	Summary: HP Power Manager is prone to multiple remote code execution (RCE) vulnerabilities because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM privileges, resulting in a complete compromise of the affected computer. Failed exploit attempts will result in a denial-of-service condition. Versions prior to Power Manager 4.2.10 are affected. Solution: The vendor has released updates and an advisory. Please see the references for details. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3999 BugTraq ID: 37867 http://www.securityfocus.com/bid/37867 HPdes Security Advisory: HPSBMA02485 http://marc.info/?l=bugtraq&m=126393370331959&w=2 HPdes Security Advisory: SSRT090252 http://secunia.com/secunia_research/2009-47/ http://securitytracker.com/id?1023470 http://secunia.com/advisories/37280 http://securityreason.com/securityalert/8482 Common Vulnerability Exposure (CVE) ID: CVE-2009-4000 BugTraq ID: 37873 http://www.securityfocus.com/bid/37873 http://secunia.com/secunia_research/2009-48/
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.