critical10.0Public exploit code
CVE-2009-3999
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileNam…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Power Manager - 'formExportDataLogs' Remote Buffer Overflow (Metasploit)2011-10-20 · remote · cgi · Verified
Impact
Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Power Manager | through 4.2.9 Versions 4.2.5, 4.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=126393370331959&w=2
- http://secunia.com/advisories/37280
- http://secunia.com/secunia_research/2009-47/
- http://securityreason.com/securityalert/8482
- http://securitytracker.com/id?1023470
- http://www.securityfocus.com/bid/37867
- http://marc.info/?l=bugtraq&m=126393370331959&w=2
- http://secunia.com/advisories/37280
- http://secunia.com/secunia_research/2009-47/
- http://securityreason.com/securityalert/8482
- http://securitytracker.com/id?1023470
- http://www.securityfocus.com/bid/37867