CVE-2009-2685

Description

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

Affected products

• HP / power_manager

References

• MISChttp://www.osvdb.org/59684
• MISChttp://www.securityfocus.com/bid/36933
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2009/3154
• MAILING_LISThttp://marc.info/?l=bugtraq&m=125744000032141&w=2
• MISChttp://www.securityfocus.com/archive/1/507708/100/0/threaded
• VENDOR_ADVISORYhttp://secunia.com/advisories/37276
• MAILING_LISThttp://marc.info/?l=bugtraq&m=125744000032141&w=2
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-09-081/
• MISChttp://securitytracker.com/id?1023140