HP StorageWorks Storage Mirroring 'DoubleTake.exe' Remote Code Execution Vulnerability

Bugtraq ID:	45526
Class:	Boundary Condition Error
CVE:	CVE-2010-4116
Remote:	Yes
Local:	No
Published:	Dec 21 2010 12:00AM
Updated:	Dec 24 2010 02:53AM
Credit:	Abdul Aziz Hariri of ThirdEyeTesters and TippingPoint's Zero Day Initiative
Vulnerable:	HP StorageWorks Storage Mirroring 5.2.2.1771.1 HP StorageWorks Storage Mirroring 5
Not Vulnerable:	HP StorageWorks Storage Mirroring 5.2.2.1771.2

HP StorageWorks Storage Mirroring 'DoubleTake.exe' Remote Code Execution Vulnerability

HP StorageWorks Storage Mirroring is prone to a remote code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary code. Successful exploits will completely compromise affected computers.

HP StorageWorks Storage Mirroring versions 5 through 5.2.2.1771.1 are vulnerable.

HP StorageWorks Storage Mirroring 'DoubleTake.exe' Remote Code Execution Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].

HP StorageWorks Storage Mirroring 'DoubleTake.exe' Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for details.

HP StorageWorks Storage Mirroring 'DoubleTake.exe' Remote Code Execution Vulnerability

References:

• HP StorageWorks Storage Mirroring Software (HP)
  
• HPSBST02619 SSRT100281 rev.1 - HP StorageWorks Storage Mirroring, Remote Executi (HP)
  
• ZDI-10-293 HP StorageWorks Storage Mirroring DoubleTake.exe Remote Code Executio (Zero Day Initiative)