CVE-2009-2685

Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary code via the Login variable.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

76.71% chance of exploitation in the next 30 days, 100th percentile

Published

2009-11-06

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_power_manager_lo…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16785
• https://www.exploit-db.com/exploits/10099

References

• CVE Record
• NVD entry

Related

• CVE-2009-2684
• CVE-2009-2692
• CVE-2009-2669
• CVE-2009-2694
• CVE-2009-2656
• CVE-2009-2698