HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
BID:46234
Info
HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
| Bugtraq ID: | 46234 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-0921 CVE-2011-0922 CVE-2011-0923 CVE-2011-0924 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2011 12:00AM |
| Updated: | Aug 09 2013 06:16AM |
| Credit: | Anonymous |
| Vulnerable: |
HP OpenView Storage Data Protector 5.5 HP OpenView Storage Data Protector 6.11 HP OpenView Storage Data Protector 6.10 HP OpenView Storage Data Protector 6.1 HP OpenView Storage Data Protector 6.0 HP OpenView Storage Data Protector 5.1 HP Data Protector Manager A.06.11 HP Data Protector Manager 6.11 |
| Not Vulnerable: | |
Discussion
HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
HP OpenView Storage Data Protector is prone to multiple remote code-execution vulnerabilities that affect the Cell Manager and Client components.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise an affected computer.
HP OpenView Storage Data Protector is prone to multiple remote code-execution vulnerabilities that affect the Cell Manager and Client components.
An attacker can exploit these issues to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise an affected computer.
Exploit / POC
HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
The following exploits are available:
The following exploits are available:
Solution / Fix
HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
Solution:
Vendor updates are available. Please see the referenced vendor advisory for more information.
References
HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities
References:
References:
- HP Homepage (HP)
- ZDI-11-054 Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote (Zero Day Initiative)
- ZDI-11-055 Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execu (Zero Day Initiative)
- ZDI-11-056 Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Executio (Zero Day Initiative)
- ZDI-11-057 Hewlett-Packard Data Protector Cell Manager Service Authentication By (Zero Day Initiative)