high7.5Public exploit code
CVE-2011-4162
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Device Access Manager for HP ProtectTools 5.0/6.0 - Heap Memory Corruption2011-12-02 · dos · windows · Verified
Impact
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Protecttools Device Access Manager | through 6.0.0.12 Versions 6.0.0.9, 6.0.0.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=132284686204608&w=2
- http://marc.info/?l=bugtraq&m=134152032516062&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71600
- https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html
- http://marc.info/?l=bugtraq&m=132284686204608&w=2
- http://marc.info/?l=bugtraq&m=134152032516062&w=2
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71600
- https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html