HP OpenView Storage Data Protector Cell Manager 'crs.exe' Remote Code Execution Vulnerability

Bugtraq ID:	45929
Class:	Boundary Condition Error
CVE:	CVE-2011-0273
Remote:	Yes
Local:	No
Published:	Jan 18 2011 12:00AM
Updated:	Jan 20 2011 08:51PM
Credit:	Abdul Aziz Hariri of ThridEyeTesters and an anonymous researcher working with TippingPoint's Zero Day Initiative
Vulnerable:	HP OpenView Storage Data Protector 6.11
Not Vulnerable:

HP OpenView Storage Data Protector Cell Manager 'crs.exe' Remote Code Execution Vulnerability

HP OpenView Storage Data Protector is prone to a remote code-execution vulnerability that affects the Cell Manager component because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise an affected computer.

The issue affects HP OpenView Storage Data Protector version 6.11 running on HP-UX, Solaris, Linux, and Windows.

HP OpenView Storage Data Protector Cell Manager 'crs.exe' Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP OpenView Storage Data Protector Cell Manager 'crs.exe' Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for details.

HP OpenView Storage Data Protector Cell Manager 'crs.exe' Remote Code Execution Vulnerability

References:

• HP Homepage (HP)
  
• HPSBMA02625 SSRT100138 rev.1 - HP OpenView Storage Data Protector, Remote Execut (HP)
  
• ZDI-11-024: Hewlett-Packard Data Protector Cell Manager Remote Code Execution Vu (TippingPoint Zero Day Initiative)