critical10.0Public exploit code
CVE-2011-0922
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Data Protector - CMD Install Service (Metasploit)2013-08-02 · remote · windows · Verified
- HP Data Protector Client - EXEC_CMD Remote Code Execution2012-06-19 · remote · windows · Verified
- HP Data Protector Client 6.11 - 'EXEC_SETUP' Remote Code Execution2011-05-29 · remote · windows · Verified
Impact
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Data Protector | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp
- http://marc.info/?l=bugtraq&m=130391284726795&w=2
- http://www.securityfocus.com/archive/1/516272/100/0/threaded
- http://www.securityfocus.com/bid/46234
- http://www.vupen.com/english/advisories/2011/0308
- http://zerodayinitiative.com/advisories/ZDI-11-056/
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp
- http://marc.info/?l=bugtraq&m=130391284726795&w=2
- http://www.securityfocus.com/archive/1/516272/100/0/threaded
- http://www.securityfocus.com/bid/46234
- http://www.vupen.com/english/advisories/2011/0308
- http://zerodayinitiative.com/advisories/ZDI-11-056/