Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
BID:47005
Info
Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 47005 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2011-4157 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 23 2011 12:00AM |
| Updated: | May 18 2012 07:20PM |
| Credit: | Nicolas Gregoire of Agarri |
| Vulnerable: |
HP Virtual SAN Appliance 0 HP StorageWorks P4000 Virtual SAN Appliance 9.0 |
| Not Vulnerable: |
HP StorageWorks P4000 Virtual SAN Appliance 9.5 |
Discussion
Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
Hewlett-Packard Virtual SAN Appliance is prone to a remote buffer-overflow vulnerability.
Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
Hewlett-Packard Virtual SAN Appliance is prone to a remote buffer-overflow vulnerability.
Attackers may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.
Exploit / POC
Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
The following exploit is available:
The following exploit is available:
Solution / Fix
Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
Solution:
Vendor updates are available. Please see the referenced advisory for details.
Solution:
Vendor updates are available. Please see the referenced advisory for details.
References
Hewlett-Packard Virtual SAN Appliance 'hydra.exe' Remote Buffer Overflow Vulnerability
References:
References:
- HP StorageWorks P4000 Virtual SAN Remote Command Execution Vulnerability (iDefense)
- Vendor Home Page (Hewlett-Packard)
- ZDI-11-111: (0Day) Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request (Zero Day Initiative)
- (0Day) Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request Remote Code (Zero Day Initiative)
- HPSBST02722 SSRT100279 rev.1 - HP StorageWorks P4000 Virtual SAN Appliance, Exec (HP)