Message-ID: <4DC989CE.2090608@gra.gov.br>
Date: Tue, 10 May 2011 15:54:06 -0300
From: Júlio César Abreu <julio@....gov.br>
To: ZDI Disclosures <zdi-disclosures@...pingpoint.com>,
	full-disclosure@...ts.grok.org.uk
Subject: unsubscription

What are e-mail to unsubscription?

Em 10/5/2011 15:36, ZDI Disclosures escreveu:
> ZDI-11-166: HP 3COM/H3C Intelligent Management Center imcsyslogdm Remote Code Execution Vulnerability
>
> http://www.zerodayinitiative.com/advisories/ZDI-11-166
>
> May 10, 2011
>
> -- CVE ID:
> CVE-2011-1854
>
> -- CVSS:
> 10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
>
> -- Affected Vendors:
> Hewlett-Packard
>
> -- Affected Products:
> Hewlett-Packard H3C Intelligent Management Center
>
> -- TippingPoint(TM) IPS Customer Protection:
> TippingPoint IPS customers have been protected against this
> vulnerability by Digital Vaccine protection filter ID 11199.
> For further product information on the TippingPoint IPS, visit:
>
>      http://www.tippingpoint.com
>
> -- Vulnerability Details:
> This vulnerability allows remote attackers to execute arbitrary code on
> vulnerable installations of HP 3com/H3C Intelligent Management Center.
> Authentication is not required to exploit this vulnerability.
>
> The flaw exists within the imcsyslogdm.exe component which listens by
> default on UDP port 514. When handling a syslog packet having a size
> larger than 2048 bytes the process attempts to exit. An exception
> handler is called that makes a call into a location that has been
> previously freed. A remote attacker can exploit this vulnerability to
> execute arbitrary code under the context of the SYSTEM user.
>
> -- Vendor Response:
> Hewlett-Packard has issued an update to correct this vulnerability. More
> details can be found at:
>
> http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02822750
>
> -- Disclosure Timeline:
> 2011-01-21 - Vulnerability reported to vendor
> 2011-05-10 - Coordinated public release of advisory
>
> -- Credit:
> This vulnerability was discovered by:
>      * Luigi Auriemma
>
> -- About the Zero Day Initiative (ZDI):
> Established by TippingPoint, The Zero Day Initiative (ZDI) represents
> a best-of-breed model for rewarding security researchers for responsibly
> disclosing discovered vulnerabilities.
>
> Researchers interested in getting paid for their security research
> through the ZDI can find more information and sign-up at:
>
>      http://www.zerodayinitiative.com
>
> The ZDI is unique in how the acquired vulnerability information is
> used. TippingPoint does not re-sell the vulnerability details or any
> exploit code. Instead, upon notifying the affected product vendor,
> TippingPoint provides its customers with zero day protection through
> its intrusion prevention technology. Explicit details regarding the
> specifics of the vulnerability are not exposed to any parties until
> an official vendor patch is publicly available. Furthermore, with the
> altruistic aim of helping to secure a broader user base, TippingPoint
> provides this vulnerability information confidentially to security
> vendors (including competitors) who have a vulnerability protection or
> mitigation product.
>
> Our vulnerability disclosure policy is available online at:
>
>      http://www.zerodayinitiative.com/advisories/disclosure_policy/
>
> Follow the ZDI on Twitter:
>
>      http://twitter.com/thezdi
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

-- 
Júlio César de Abreu SUPSI/SISEG/SISSP TEL (0XX11) 2173-1505 FAX (0XX11) 
2173-1615 julio.abreu@...pro.gov.br

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists