HP OpenView Storage Data Protector CVE-2011-1864 Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	48178
Class:	Unknown
CVE:	CVE-2011-1864
Remote:	Yes
Local:	No
Published:	Jun 09 2011 12:00AM
Updated:	Jun 10 2011 05:30PM
Credit:	The vendor reported this issue.
Vulnerable:	HP OpenView Storage Data Protector 6.11 HP OpenView Storage Data Protector 6.10 HP OpenView Storage Data Protector 6.0
Not Vulnerable:

HP OpenView Storage Data Protector CVE-2011-1864 Unspecified Remote Code Execution Vulnerability

HP OpenView Storage Data Protector is prone to an unspecified code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

Very few technical details are currently available. We will update this BID as more information emerges.

HP OpenView Storage Data Protector versions 6.0, 6.10, and 6.11 for HP-UX, Solaris, Linux, and Windows are vulnerable.

HP OpenView Storage Data Protector CVE-2011-1864 Unspecified Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP OpenView Storage Data Protector CVE-2011-1864 Unspecified Remote Code Execution Vulnerability

Solution:
The vendor has released an update. Please see the references for more information.

HP OpenView Storage Data Protector CVE-2011-1864 Unspecified Remote Code Execution Vulnerability

References:

• HP Homepage (HP)
  
• HPSBMA02631 SSRT100324 (HP)
  
• OpenView Storage Data Protector Product Page (HP)
  
• HPSBMA02631 SSRT100324 rev.1 - HP OpenView Storage Data Protector, Remote Execut ([email protected])