HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability

Bugtraq ID:	19495
Class:	Input Validation Error
CVE:	CVE-2006-4201
Remote:	Yes
Local:	No
Published:	Aug 11 2006 12:00AM
Updated:	May 09 2007 05:09PM
Credit:	The vendor disclosed this issue.
Vulnerable:	HP OpenView Storage Data Protector 5.5 HP OpenView Storage Data Protector 5.1
Not Vulnerable:

HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability

HP OpenView Storage Data Protector Backup Agent is prone to an arbitrary command-execution vulnerability.

Attackers can exploit this vulnerability to execute arbitrary commands in the context of the affected process. This may help them compromise the underlying system; other attacks are also possible.

HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability

Solution:
The vendor released an advisory and fixes to address this issue. Please see the referenced advisory for information on obtaining and applying fixes.

HP OpenView Storage Data Protector Backup Agent Remote Arbitrary Command Execution Vulnerability

References:

• HPSBMA02138 SSRT061184 rev.1 - HP OpenView Storage (HP)
  
• NISCC Vulnerability Advisory 412866/NISCC/OPENVIEW (NISCC)
  
• OpenView Storage Data Protector Product Page (HP)
  
• [security bulletin] HPSBMA02138 SSRT061184 rev.2 - HP OpenView Storage Data Prot ([email protected])
  
• HPSBMA02138 SSRT061184 rev.1 - HP OpenView Storage Data Protector, Remote Arbitr ([email protected])
  
• [security bulletin] HPSBMA02121 SSRT061157 rev.3 - HP OpenView Storage Data Prot (HP)