| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 10 May 2011 22:34:47 +0200 From: "Mario J. Pedras" <dspam@...n.net> To: Júlio César Abreu <julio@....gov.br> Cc: ZDI Disclosures <zdi-disclosures@...pingpoint.com>, full-disclosure@...ts.grok.org.uk Subject: Re: unsubscription hereinafter, you should pay a little more attention to the list headers, in a near future it could help you so much! https://lists.grok.org.uk/mailman/listinfo/full-disclosure Good luck! Beijinhos e abraços Quoting Júlio César Abreu <julio@....gov.br>: > What are e-mail to unsubscription? > > Em 10/5/2011 15:36, ZDI Disclosures escreveu: >> ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm >> Remote Code Execution Vulnerability >> >> http://www.zerodayinitiative.com/advisories/ZDI-11-166 >> >> May 10, 2011 >> >> -- CVE ID: >> CVE-2011-1854 >> >> -- CVSS: >> 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C) >> >> -- Affected Vendors: >> Hewlett-Packard >> >> -- Affected Products: >> Hewlett-Packard H3C Intelligent Management Center >> >> -- TippingPoint(TM) IPS Customer Protection: >> TippingPoint IPS customers have been protected against this >> vulnerability by Digital Vaccine protection filter ID 11199. >> For further product information on the TippingPoint IPS, visit: >> >> http://www.tippingpoint.com >> >> -- Vulnerability Details: >> This vulnerability allows remote attackers to execute arbitrary code on >> vulnerable installations of HP 3com/H3C Intelligent Management Center. >> Authentication is not required to exploit this vulnerability. >> >> The flaw exists within the imcsyslogdm.exe component which listens by >> default on UDP port 514. When handling a syslog packet having a size >> larger than 2048 bytes the process attempts to exit. An exception >> handler is called that makes a call into a location that has been >> previously freed. A remote attacker can exploit this vulnerability to >> execute arbitrary code under the context of the SYSTEM user. >> >> -- Vendor Response: >> Hewlett-Packard has issued an update to correct this vulnerability. More >> details can be found at: >> >> http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750 >> >> -- Disclosure Timeline: >> 2011-01-21 - Vulnerability reported to vendor >> 2011-05-10 - Coordinated public release of advisory >> >> -- Credit: >> This vulnerability was discovered by: >> * Luigi Auriemma >> >> -- About the Zero Day Initiative (ZDI): >> Established by TippingPoint, The Zero Day Initiative (ZDI) represents >> a best-of-breed model for rewarding security researchers for responsibly >> disclosing discovered vulnerabilities. >> >> Researchers interested in getting paid for their security research >> through the ZDI can find more information and sign-up at: >> >> http://www.zerodayinitiative.com >> >> The ZDI is unique in how the acquired vulnerability information is >> used. TippingPoint does not re-sell the vulnerability details or any >> exploit code. Instead, upon notifying the affected product vendor, >> TippingPoint provides its customers with zero day protection through >> its intrusion prevention technology. Explicit details regarding the >> specifics of the vulnerability are not exposed to any parties until >> an official vendor patch is publicly available. Furthermore, with the >> altruistic aim of helping to secure a broader user base, TippingPoint >> provides this vulnerability information confidentially to security >> vendors (including competitors) who have a vulnerability protection or >> mitigation product. >> >> Our vulnerability disclosure policy is available online at: >> >> http://www.zerodayinitiative.com/advisories/disclosure_policy/ >> >> Follow the ZDI on Twitter: >> >> http://twitter.com/thezdi >> >> _______________________________________________ >> Full-Disclosure - We believe in it. >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html >> Hosted and sponsored by Secunia - http://secunia.com/ >> > > -- > Júlio César de Abreu SUPSI/SISEG/SISSP TEL (0XX11) 2173-1505 FAX > (0XX11) 2173-1615 julio.abreu@...pro.gov.br > _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists