HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability

Bugtraq ID:	47004
Class:	Boundary Condition Error
CVE:	CVE-2011-4791
Remote:	Yes
Local:	No
Published:	Mar 23 2011 12:00AM
Updated:	Feb 02 2012 07:40PM
Credit:	Roi Mallo
Vulnerable:	HP OpenView Storage Data Protector 6.0.596 HP OpenView Storage Data Protector 5.5 HP OpenView Storage Data Protector 6.11 HP OpenView Storage Data Protector 6.10 HP OpenView Storage Data Protector 6.1 HP OpenView Storage Data Protector 6.0 HP OpenView Storage Data Protector 5.1 HP OpenView Storage Data Protector 0
Not Vulnerable:

HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability

HP Data Protector is prone to a remote code-execution vulnerability in the 'DBServer.exe' process.

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.

HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the reference for more details.

HP Data Protector 'DBServer.exe' Remote Code Execution Vulnerability

References:

• HP Homepage (HP)
  
• HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Execut (HP)
  
• ZDI-11-112: (0 day) Hewlett-Packard Data Protector Media Operations (ZDI Disclosures )
  
• ZDI-11-112 (0 day) Hewlett-Packard Data Protector Media Operations DBServer.exe (TippingPoint Zero Day Initiative)