HP System Management Homepage

ソフト名：HP System Management Homepage 6.3未満

回避策：アップデート, HPSBMA02662 SSRT100409にて対応

脆弱性：セキュリティ制限の回避, DoS攻撃, システムアクセス, 不特定のエラー, リモートコード実行, 不明なエラー, 不正アクセス

ソース：http://h18000.www1.hp.com/products/servers/management/agents/index.html

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02735910

http://secunia.com/advisories/39573/

http://secunia.com/advisories/40268/

http://secunia.com/advisories/40906/

http://secunia.com/advisories/41724/

http://secunia.com/advisories/42175/

http://secunia.com/advisories/44231/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1917

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2531

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2939

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2950

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4008

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4156

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1540

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1541

CVE：CVE-2010-1917, CVE-2010-2531, CVE-2010-2939, CVE-2010-2950, CVE-2010-3709, CVE-2010-4008, CVE-2010-4156, CVE-2011-1540, CVE-2011-1541

危険性：High Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0/6.1
回避策：HPSBMA02584 SSRT100230 rev.1にて対応
脆弱性：フィッシング攻撃, オープンリダイレクト
ソース：http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02514953
http://www.securityfocus.com/bid/43462
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3283
http://www.vupen.com/english/advisories/2010/2493
CVE：CVE-2010-3283
危険性：Medium Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0/6.1
回避策：HPSBMA02578 SSRT100069 rev.1にて対応
脆弱性：機密情報の奪取, 特定されていない脆弱性
ソース：http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02514929&admit=109447627+1285633395901+28353475
http://www.securityfocus.com/bid/43463
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3284
http://www.vupen.com/english/advisories/2010/2493
CVE：CVE-2010-3284
危険性：Low Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0/6.1
回避策：HPSBMA02568 SSRT100219にて対応
脆弱性：XSS, 認証資格情報の奪取
ソース：http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02512995
http://www.securityfocus.com/bid/43269
http://www.securityfocus.com/bid/43334
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3012
http://secunia.com/advisories/41480
http://secunia.com/advisories/41490
http://www.vupen.com/english/advisories/2010/2418
CVE：CVE-2010-3012
危険性：Medium Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0/6.1
回避策：HPSBMA02568 SSRT100219にて対応
脆弱性：HTTPレスポンス分割攻撃, XSS, Webキャッシュ汚染
ソース：http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02512995
http://www.securityfocus.com/bid/43236
http://www.securityfocus.com/bid/43269
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3011
http://secunia.com/advisories/41480
http://secunia.com/advisories/41490
http://www.vupen.com/english/advisories/2010/2418
CVE：CVE-2010-3011
危険性：Medium Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0/6.1
回避策：HPSBMA02566 SSRT100045にて対応
脆弱性：機密情報の奪取, 特定されていない脆弱性
ソース：https://www.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02475053
http://www.securityfocus.com/bid/43208
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3009
http://secunia.com/advisories/41427
http://www.vupen.com/english/advisories/2010/2394
CVE：CVE-2010-3009
危険性：Low Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 2.0.0～2.2.8
回避策：未対応
脆弱性：フィッシング攻撃
ソース：http://h18000.www1.hp.com/products/servers/management/agents/documentation.html
http://yehg.net/lab/pr0js/advisories/hp_system_management_homepage_url_redirection_abuse
http://www.securityfocus.com/bid/39676
危険性：Medium Risk

HP System Management Homepage

ソフト名：HP System Management Homepage 6.0.0.95, 6.0.0.96
回避策：パッチのインストール（HPSBMA02492 SSRT100079）
脆弱性：未公開
ソース：http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02029444
http://www.securityfocus.com/bid/39632
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1034
CVE：CVE-2010-1034
危険性：Medium Risk

HP System Management Homepage

HP System Management Homepage 2.1.15-210、3.0.0-64、3.0.0-68、3.0.2-77
回避策あり
XSS
http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0586.html