critical10.0Public exploit code
CVE-2011-0923
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted comma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Data Protector 6.1 - EXEC_CMD Remote Code Execution (Metasploit)2012-02-25 · remote · windows · Verified
- HP Data Protector Client 6.11 - 'EXEC_CMD' Remote Code Execution2011-05-28 · remote · windows · Verified
- HP Data Protector - Remote Command Execution2013-08-07 · remote · windows
- HP Data Protector (Linux) - Remote Command Execution2011-08-10 · remote · linux
- HP Data Protector (HP-UX) - Remote Shell2011-08-05 · remote · hp-ux
Impact
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Data Protector | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp
- http://marc.info/?l=bugtraq&m=130391284726795&w=2
- http://securityreason.com/securityalert/8261
- http://securityreason.com/securityalert/8323
- http://securityreason.com/securityalert/8329
- http://www.securityfocus.com/bid/46234
- http://www.vupen.com/english/advisories/2011/0308
- http://zerodayinitiative.com/advisories/ZDI-11-055/
- http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp
- http://marc.info/?l=bugtraq&m=130391284726795&w=2
- http://securityreason.com/securityalert/8261
- http://securityreason.com/securityalert/8323
- http://securityreason.com/securityalert/8329
- http://www.securityfocus.com/bid/46234
- http://www.vupen.com/english/advisories/2011/0308
- http://zerodayinitiative.com/advisories/ZDI-11-055/