The host is running HP Power Manager and is prone to buffer overflow vulnerability.

Successful exploitation could allow users to cause a Denial of Service condition. Impact Level: Application

Upgrade to HP Power Manager (HPPM) 4.3.2 or later, For updates refer to http://h18000.www1.hp.com/products/servers/proliantstorage/power-protection/software/power-manager/index.html

The flaw is due to a boundary error when processing URL parameters passed to the login form of the management web server. It can be exploited to cause a stack-based buffer overflow via a specially crafted 'Login' variable.

HP Power Manager (HPPM) before 4.3.2

• http://marc.info/?l=bugtraq&m=129251322532373&w=2
• http://secunia.com/advisories/42644
• http://securitytracker.com/alerts/2010/Dec/1024902.html
• http://www.zerodayinitiative.com/advisories/ZDI-10-292/

---

Updated on 2015-03-25