Thursday, November 19, 2009

Another 0day on HP Power Manager


I have been working on this CVE-2009-2685/ZDI (http://www.zerodayinitiative.com/advisories/ZDI-09-081/) this afternoon and now managed to get the dummy shellcode (calc.exe) running.yey..:D



The bug was mentioned by ZDI at link provided, and as claimed by HP advisory, they already patch the bug(http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01905743).

Ironically, by using the same patch released by HP (4.9.2 - The latest one), i still managed to exploit the code. I guess, HP didn't really patch the bug. This is probably wild guess, but if we take a look at workaround, HP only recommending to limit the HP Power Manager Server access to trusted user/ip/network.

Exploiting this bug is trivial, though. Reading from any windows exploitation materials is enough. This standard/classic stack overflow for sprint bug. 

110 comments:

Alex williams said...

Great Content here some tips regarding HP Printer, We support all types of HP printer troubleshooting and service.Just enter the model number of your printer in www.123.hp.com to identify the software and drivers your printer requires.Download and install it in your mac and 'Run' the file

ariamadison said...

Epson WF 4730

Anonymous said...

pastillas para crecer el pene

Anonymous said...

Phyton Gel prix

Anonymous said...

pillole erezione

Anonymous said...

Maca du Pérou Prix

Anonymous said...

estirar el pene

Anonymous said...

was hilft gegen erektionsprobleme

Anonymous said...

impotenz behandeln

Anonymous said...

esteroides

Anonymous said...

Muscle Pro Xtreme composición

Anonymous said...

https://nuevo-comienzo.com/fast-burn-extreme/

Anonymous said...

th"=ferh a<

Anonymous said...

Titan Gel

Anonymous said...

Member xxl

Anonymous said...

http://suplementos2020.com/nutrigo-lab-mass/

Anonymous said...

Erofertil opinioni

Anonymous said...

https://nuovo-inizio.com/fast-burn-extreme/

Anonymous said...

https://nuovo-inizio.com/curcuma/

Anonymous said...

potenzmitel

Anonymous said...

http://top3-muscle-mass-supplements.com/how-to-improve-the-appearance-of-your-muscles.html

Anonymous said...

http://top3-muscle-mass-supplements.com/how-to-develop-dream-weight-quickly.html

Anonymous said...

http://izomepito-kiegeszitok-top3.com/hogyan-epits-izmot-lepesrol-lepesre.html

Anonymous said...

como subir la libido

Anonymous said...

green barley plus

Anonymous said...

crescere massa muscolare

Anonymous said...

Potencialex prezzo

Anonymous said...

aumentare massa muscolare alimentazione

Anonymous said...

Maca du Pérou Où Acheter

Anonymous said...

Penilux Gel fonctionnement

Anonymous said...

miglior anabolizzante

Anonymous said...

VigRX Plus azione

Anonymous said...

pastillas para subir de peso

Anonymous said...

schnell masse aufbauen

Anonymous said...

aumentare muscoli

Anonymous said...

jakie odzywki na mase

Anonymous said...

pastillas para gimnasio

Anonymous said...

proteine da assumere per aumentare la massa muscolare

Anonymous said...

proteinas para adelgazar y definir mujer

Anonymous said...

http://penisznovelo-eljarasok-hu.eu/Member-XXL.html

Anonymous said...

http://penisverlangerung-pillen-de.eu/titan-gel.html

Anonymous said...

suplementos para aumentar masa muscular hombres

Anonymous said...

http://muscle-mass-suplemetns.co.uk/

Anonymous said...

http://potency-pills-ranking.co.uk/titan-gel.html

Anonymous said...

http://penisznovelo-eljarasok-hu.eu/Beast-Gel.html

Anonymous said...

http://potenspiller2017.ovh/xtrasize-eller-member-xxl.html

Anonymous said...

http://potenspiller2017.ovh/erogan.html

Anonymous said...

http://potenzmittel-online-bestellen-de.eu/erozon-max.html

Anonymous said...

http://best-slimming-pills-ranking.co.uk/overweight-and-slimming-pills.html

Anonymous said...

http://best-slimming-pills-ranking.co.uk/ketogenic-diet.html

Anonymous said...

http://bigger-penis-pills.co.uk/maxisize.html

Anonymous said...

http://potenzmittel-online-bestellen-de.eu/Potencialex.html

Anonymous said...

http://penisverlangerung-pillen-de.eu/atlant-gel.html

Anonymous said...

http://penisverlangerung-pillen-de.eu/Phyton-Gel.html

Anonymous said...

http://potenspiller2017.ovh/machoman-eller-eron-plus.html

Anonymous said...

http://jak-prodlouzit-penis-cz.eu/turbomaxblue.html

Anonymous said...

http://tabletky-na-rast-penisu-sk.eu/TurboMaxBlue.html

Anonymous said...

proteine pour prendre du muscle rapidement

Anonymous said...

viktminskning tabletter

Anonymous said...

günstig potenzmittel kaufen

Anonymous said...

illegale tabletten zum abnehmen

Anonymous said...

xtraxex

Anonymous said...

pildoras para alargar el miembro

Anonymous said...

erectonin preise

Anonymous said...

doctor extenda

Anonymous said...

member xxl ergebnisse

Anonymous said...

metode pentru marirea penisului

Anonymous said...

coupe faim maigrir

Anonymous said...

eikel vergroten

Anonymous said...

få hårdare stånd

Anonymous said...

pastile

Anonymous said...

domowy sposób na powiększenie biustu

Anonymous said...

member xxl

Anonymous said...

toksyna tekst

Anonymous said...

tabletki na odchudzanie brzucha

Anonymous said...

problem z erekcją

Anonymous said...

arrestare caduta capelli

Anonymous said...

ultra testo

Anonymous said...

panthrix minoxidil

Anonymous said...

creatina on opiniones

Anonymous said...

produit musculation rapide

Anonymous said...

penis vergroten operatie

Anonymous said...

anabolizzanti pastiglie

Anonymous said...

member xxl tablete

Anonymous said...

testo ultra pastillas

Anonymous said...

grossir son penis

Anonymous said...

bandil comprimé

Anonymous said...

vigrx plus controindicazioni

Anonymous said...

menvit gélule

Anonymous said...

testostoron

Anonymous said...

ketos active

Anonymous said...

sucha masa miesniowa

Anonymous said...

daa efekty uboczne

Anonymous said...

regaine espuma precio

Anonymous said...

https://uj-kezdet.com/a-fogyokuras-tablettak-rangsorolasa/

Anonymous said...

http://tabletky-na-zvacsenie-penisu.com/

Anonymous said...

pillen

Anonymous said...

http://izomepito-kiegeszitok-top3.com/

Anonymous said...

http://penisverlangerung-pillen-de.eu/

Anonymous said...

http://basta-testosteronboosters-se.eu

Anonymous said...

http://pour-la-masse.ovh

Anonymous said...

http://umbb-handball.fr/

Anonymous said...

http://nnet.it/

Anonymous said...

http://ko21.fr/le-deseo-lo-mejor/

Anonymous said...

http://ko21.fr/caravane-deseo-knaus/

Anonymous said...

http://mocinfo.org/chirurgische-penisverlangerung/

Anonymous said...

http://speed-com.fr/el-macho-effets-secondaires/

Anonymous said...

http://los-mejores-boosters-de-testosterona-es.eu

Anonymous said...

http://intecum.fr

Anonymous said...

Для расшифровки карт Таро используются дополнительные словари. Важно не забывать, что результат предсказания грядущего непосредственно зависит от верования гадающего. Нет нужды поверхностно относиться к ворожбе на Таро. Гадание на рунах на месяц является максимально вероятным способом прочитать будущее личности. Начальные методы хиромантии родились тысячелетия тому назад до Н.Э. Синоптические катаклизмы или церемониальные приношения животных в дар сформировали определенное разъснение увиденного.