Next Page >>
node
AVS appliances by logging in to the Management Station web-based user
interface or from the command-line interface (CLI) of the appliance
operating system.
Customers who use the AVS 3180 or 3180A Management Station can determine
their node software versions by navigating to the Cluster Information
Page. Each registered node will display the corresponding software
version when the node is selected.
The AVS appliance version can also be determined from the host operating
system by using the "Show Version" command.
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01817357
Version: 1
HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-08-18
Last Updated: 2009-08-18
XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3
and 5.x-1.1)
Discovered by Martin Barbella <martybarbella@gmail.com>
Description of Vulnerability:
-----------------------------
Drupal is a free software package that allows an individual or a
community of users to easily publish, manage and organize a wide
variety of content on a website. (From: http://drupal.org/about)
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01321117
Version: 1
HPSBMA02307 SSRT071420 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Denial of Service (DoS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2008-02-04
Last Updated: 2008-02-04
CVE Name: CVE-2009-0920, CVE-2009-0921
3. *Vulnerability Description*
Several buffer overflows have been found in HP OpenView Network Node
Manager, which can be exploited to remotely compromise a user's system.
4. *Vulnerable packages*
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01188923
Version: 1
HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2007-12-05
Last Updated: 2007-12-05
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01218087
Version: 1
HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2007-11-28
Last Updated: 2007-11-28
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:http://security.FreeBSD.org/>.
I. Background
IPv6 nodes use the Neighbor Discovery protocol to determine the link-layer
address of other nodes, find routers, and maintain reachability information.
The Neighbor Discovery protocol uses Neighbor Solicitation (ICMPv6 type 135)
to query target nodes for their link-layer addresses.
II. Problem Description
The Networker software versions affected are incorrectly identified.
The following Networker products are affected by this issue:
* NetWorker Server, Storage Node and Client 7.3.x and 7.4, 7.4.1, 7.4.2
* NetWorker Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier
* NetWorker Module for Microsoft Exchange 5.1 and earlier
* NetWorker Module for Microsoft Applications 2.0 and earlier
* NetWorker Module for Meditech 2.0 and earlier
* NetWorker PowerSnap 2.4 SP1 and earlier
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01112038
Version: 1
HPSBMA02242 SSRT061260 rev.1 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2007-08-07
Last Updated: 2007-08-07
VUPEN Security Research - HP OpenView Network Node Manager
"nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703)
http://www.vupen.com/english/research.php
I. BACKGROUND
---------------------
"HP OpenView Network Node Manager is the market-leading network management
VUPEN Security Research - HP OpenView Network Node Manager "ov.dll" Buffer
Overflow Vulnerability (CVE-2010-2704)
http://www.vupen.com/english/research.php
I. BACKGROUND
---------------------
"HP OpenView Network Node Manager is the market-leading network management
* scapy-carp.patch - A patch against the latest Scapy (currently
2.1.0) so it understands the CARP protocol. The PoC won't work without
the patch
* carp-poc.py - A very quick and dirty PoC which will force all CARP
nodes into backup mode. You need to be on the same Layer 2 as the CARP
nodes. Also make sure you have the correct interface selected
Happy hacking,
wolfie
Interactive Voice Response (Cisco Unified IP IVR) deployments are not affected
by the CTI server DoS vulnerability. The CTI server listens by default on TCP
port 42027, although the port number can be changed in the System Port
Parameters screen. This vulnerability is triggered by malformed CTI messages
addressed to the vulnerable systems that could cause the CTI server and the
Cisco Unified CCX Node Manager to fail, and all active agents will be logged
out. The DoS condition will be temporal and the Cisco UCCX system will become
operational again once the node manager and the CTI server complete their
automatic restart.
This vulnerability is documented in Cisco Bug ID CSCso89629 and has been
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01954593
Version: 1
HPSBMA02484 SSRT090076 rev.1 - HP Network Node Manager (NNM), Remote Execution of Arbitrary Commands
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2010-02-09
Last Updated: 2010-02-09
2 Ethernet/IEEE 802.3 interface(s)
1019k bytes of non-volatile configuration memory.
38079M bytes of hard disk.
981440k bytes of ATA PCMCIA card at disk 0 (Sector size 512 bytes).
Configuration register on node 0/0/CPU0 is 0x102
Boot device on node 0/0/CPU0 is mem:
!--- output truncated
Background
==========
NoMachine's NX establishes remote connections to X11 desktops over
small bandwidth links. NX and NX Node are the compression core
libraries, whereas NX is used by FreeNX and NX Node by the binary-only
NX servers.
Affected packages
=================
Background
==========
NoMachine's NX establishes remote connections to X11 desktops over
small bandwidth links. NX and NX Node are the compression core
libraries, whereas NX is used by FreeNX and NX Node by the binary-only
NX servers.
Affected packages
=================
Background
==========
NoMachine's NX establishes remote connections to X11 desktops over
small bandwidth links. NX and NX Node are the compression core
libraries, whereas NX is used by FreeNX and NX Node by the binary-only
NX servers.
Affected packages
=================
2 Ethernet/IEEE 802.3 interface(s)
1019k bytes of non-volatile configuration memory.
38079M bytes of hard disk.
981440k bytes of ATA PCMCIA card at disk 0 (Sector size 512 bytes).
Configuration register on node 0/0/CPU0 is 0x102
Boot device on node 0/0/CPU0 is mem:
!--- output truncated
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01728300
Version: 2
HPSBMA02425 SSRT080091 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-05-04
Last Updated: 2009-12-10
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01496048
Version: 3
HPSBMA02349 SSRT080043 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2008-07-08
Last Updated: 2009-05-11
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01495949
Version: 2
HPSBMA02348 SSRT080033 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2008-07-08
Last Updated: 2009-05-11
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01696729
Version: 5
HPSBMA02416 SSRT090008 rev.5 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-03-23
Last Updated: 2010-05-04
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01696729
Version: 2
HPSBMA02416 SSRT090008 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-03-23
Last Updated: 2009-03-31
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01661610
Version: 1
HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-02-04
Last Updated: 2009-02-04
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01466051
Version: 3
HPSBMA02338 SSRT080024, SSRT080041 rev.3 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2008-06-09
Last Updated: 2009-03-18
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c01950877
Version: 1
HPSBMA02483 SSRT090257 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2009-12-09
Last Updated: 2009-12-09
SUPPORT COMMUNICATION - SECURITY BULLETIN
Document ID: c02217439
Version: 2
HPSBMA02537 SSRT010027 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
Release Date: 2010-06-08
Last Updated: 2010-06-14
permission, which allows local users to cause a denial of service
(BUG and system crash) by locking a file on a (1) GFS or (2) GFS2
filesystem, and then changing this file's permissions. (CVE-2010-0727)
The do_pages_move function in mm/migrate.c in the Linux kernel before
2.6.33-rc7 does not validate node values, which allows local users
to read arbitrary kernel memory locations, cause a denial of service
(OOPS), and possibly have unspecified other impact by specifying a
node that is not part of the kernel's node set. (CVE-2010-0415)
drivers/net/e1000e/netdev.c in the e1000e driver in the Linux
Next Page>>
|