HTTP: HP Power Manager Login Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Hewlett Packard Power Manager. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the Web server.

Extended Description

HP Power Manager is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code with SYSTEM credentials, resulting in a complete compromise of the affected computer. Failed exploit attempts will result in a denial-of-service condition.

Affected Products

Hp power_manager

References

BugTraq: 36933

CVE: CVE-2009-2685

URL: http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01905743 http://www.zerodayinitiative.com/advisories/zdi-09-081/ http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c02239581 http://www.zerodayinitiative.com/advisories/zdi-10-292/

Short Name

HTTP:OVERFLOW:HP-POWERMAN-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: HP Power Manager Login Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?