HP Data Protector 'EXEC_INTEGUTIL' Arbitrary Command Execution

2014-11-13T00:00:00
ID HP_DATA_PROTECTOR_ZDI_14_344.NBIN
Type nessus
Reporter This script is Copyright (C) 2014-2022 and is owned by Tenable, Inc. or an Affiliate thereof.
Modified 2022-04-11T00:00:00

Description

Nessus was able to execute an operating system command on the remote HP Data Protector installation by sending a specially crafted 'EXEC_INTEGUTIL' packet to the HP Data Protector service.

                                        
                                            Binary data hp_data_protector_zdi_14_344.nbin