HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
BID:43167
Info
HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
| Bugtraq ID: | 43167 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 11 2010 12:00AM |
| Updated: | Sep 11 2010 12:00AM |
| Credit: | d0lc3 |
| Vulnerable: |
HP Data Protector Media Operations 6.11 |
| Not Vulnerable: | |
Discussion
HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
HP Data Protector Media Operations is prone to multiple remote denial-of-service vulnerabilities that occur because of a NULL-pointer dereference error.
Attackers can exploit these issues to crash the affected application, denying service to legitimate users. Due to the nature of these issues, attackers may also execute arbitrary code with elevated privileges; this has not been confirmed.
Data Protector Media Operations 6.11 is vulnerable; other versions may also be affected.
HP Data Protector Media Operations is prone to multiple remote denial-of-service vulnerabilities that occur because of a NULL-pointer dereference error.
Attackers can exploit these issues to crash the affected application, denying service to legitimate users. Due to the nature of these issues, attackers may also execute arbitrary code with elevated privileges; this has not been confirmed.
Data Protector Media Operations 6.11 is vulnerable; other versions may also be affected.
Exploit / POC
HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
The following archive containing proof-of-concept theme files is available; note that Symantec has not verified or tested these files. Users should exercise caution when opening or handling third-party files.
The following archive containing proof-of-concept theme files is available; note that Symantec has not verified or tested these files. Users should exercise caution when opening or handling third-party files.
Solution / Fix
HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
HP Data Protector Media Operations NULL Pointer Dereference Remote Denial of Service Vulnerabilities
References:
References: