.:[ packet storm ]:.
                         
security in numbers
security in numbers

 ///  File Name:ZDI-10-026.txt
Description:
Zero Day Initiative Advisory 10-026 - This vulnerability allows remote attackers to execute arbitrary commands on vulnerable installations of Hewlett-Packard Performance Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists in the handling of requests to the helpmanager servlet running on the Performance Insight web server. Insufficient input validation and authentication allows for arbitrary JSP pages to be uploaded which can be leveraged to execute arbitrary OS commands. Exploitation of this vulnerability allows an attacker to gain control of the affected system under SYSTEM credentials.
Author:TippingPoint
Homepage:http://www.zerodayinitiative.com/
File Size:3057
Related CVE(s):CVE-2010-0447
Last Modified:Mar 9 18:02:35 2010
MD5 Checksum:7e8b4a4e56efc310c9d29affb2ee9a3f

 .:. Back
 

 ///  Last 10 Files
  1. :· MDVSA-2010-142.txt
  2. :· uplusftp-overflow.txt
  3. :· symantecams-flaw.txt
  4. :· jira-xss.txt
  5. :· secunia-autonomykvrp.txt
  6. :· secunia-autonomykvindex.txt
  7. :· zemana-escalate.txt
  8. :· ceteraecommerce-sqlxss.txt
  9. :· secunia-wkssriu.txt
  10. :· secunia-autonomywosr.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Advisories
  1. :· MDVSA-2010-142.txt
  2. :· secunia-autonomykvrp.txt
  3. :· secunia-autonomykvindex.txt
  4. :· secunia-wkssriu.txt
  5. :· secunia-autonomywosr.txt
  6. :· secunia-autonomyrtfsigned.txt
  7. :· secunia-autonomywkssr.txt
  8. :· secunia-autonomycfp.txt
  9. :· dsa-2076-1.txt
  10. :· dsa-2075-1.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Exploits
  1. :· uplusftp-overflow.txt
  2. :· symantecams-flaw.txt
  3. :· jira-xss.txt
  4. :· zemana-escalate.txt
  5. :· ceteraecommerce-sqlxss.txt
  6. :· apachetomcat-traversal.txt
  7. :· joomlaphotomapgallery-sql.txt
  8. :· avarcade-insecure.txt
  9. :· nubuilder-rfi.txt
  10. :· punbbpunpm-sql.txt
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Tools
  1. :· AdminLoginFinder.tar.gz
  2. :· fbruteforcer.py.txt
  3. :· stackbf.c
  4. :· fuzzdiff.py.txt
  5. :· dff-0.7.0-src.tar.gz
  6. :· RewriteProxy.tar.gz
  7. :· watobo_0.9.2rev149.zip
  8. :· PHPJackal.php.gz
  9. :· skipfish-1.52b.tgz
  10. :· webenum-0.1.py.gz
[ Last 20 | Last 50 | Last 100 ]

 ///  Last 10 Misc
  1. :· NocON2010-CFP.txt
  2. :· transparent-medical-devices.pdf
  3. :· my-sql.pdf
  4. :· H2HC-CFP-2010.txt
  5. :· CVP-HackersPerspective.pdf
  6. :· buffer_overflow_edisi_ketiga.txt
  7. :· simple-sqlinj.txt
  8. :· clickonce-mitm.txt
  9. :· kiwicon2010-cfp.txt
  10. :· clubhack2010-cfp.txt
[ Last 20 | Last 50 | Last 100 ]


 .:. TopPrivacy Statement | Copyright Notice