HP Data Protector Client 6.11 - 'EXEC_SETUP' Remote Code Execution

Exploit Title: HP Data Protector Cliet EXECSETUP Remote Code Execution Vulnerability PoC ZDI-11-056 Date: 2011-05-29 Author: @fdiskyou e-mail: rui at deniable.org Version: 6.11 Tested on: Windows 2003 Server SP2 en CVE: CVE-2011-0922 Notes: ZDI-11-056 Reference:...

HP Data Protector Backup Client Service EXEC_SETUP Code Execution (CVE-2011-0922)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The backup agent supports various message types in its communication with clients in...

HP Data Protector Client agent EXEC_SETUP code execution

Added: 03/03/2011 CVE: CVE-2011-0922 BID: 46234 OSVDB: 72525 Background HP OpenView Storage Data Protector is a backup solution for enterprise and distributed environments. Problem The backup agent provided by the Data Protector Backup Client Service may be instructed to execute a setup file from...

CVE-2011-0922

Summary: CVE-2011-0922 affects HP Data Protector Client. A vulnerability in processing the EXEC_SETUP (and related EXEC_CMD/INSTALL/EXEC_SETUP) messages allows a remote attacker to force the client to load and execute arbitrary programs from a remote SMB share, enabling remote code execution. The...

CVE-2010-0922

CVE-2010-0922 affects IBM AIX 5.3 with Service Pack 5300-11-02, in the secldapclntd component. The issue is a denial of service (LDAP login failure) triggered by unknown vectors; details are partly sourced from third-party information. The description does not specify the exact root cause, vulner...

CentOS Security Advisory CESA-2009:1484 (postgresql)

The remote host is missing updates to postgresql announced in advisory CESA-2009:1484. CESA-2009:1484 65757 4 $Id: ovcesa20091484.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1484 postgresql Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

RedHat Security Advisory RHSA-2009:1484

The remote host is missing updates announced in advisory RHSA-2009:1484. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0038 did not include protection...

RedHat Security Advisory RHSA-2009:1484

The remote host is missing updates announced in advisory RHSA-2009:1484. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600 included in the Red Hat Security Advisory RHSA-2008:0038 did not include protection...

CentOS Security Advisory CESA-2009:1484 (postgresql)

The remote host is missing updates to postgresql announced in advisory CESA-2009:1484. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

SLES10: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql postgresql-contrib postgresql-devel postgresql-docs postgresql-libs postgresql-server More details may also be found by searching for the SuSE...

SLES11: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql postgresql-contrib postgresql-docs postgresql-libs postgresql-server More details may also be found by searching for the SuSE Enterprise Server 11...

SLES11: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql postgresql-contrib postgresql-docs postgresql-libs postgresql-server More details may also be found by searching for the SuSE Enterprise Server 11...

SLES9: Security update for PostgreSQL

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: postgresql-contrib postgresql-devel postgresql postgresql-libs postgresql-server postgresql-docs For more information, please visit the referenced security...

RHEL 4 / 5 : postgresql (RHSA-2009:1484)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1484 advisory. PostgreSQL is an advanced object-relational database management system DBMS. It was discovered that the upstream patch for CVE-2007-6600...

postgresql security update

8.1.18-2.el54.1 - Remove unnecessary .o file that confuses TPS tests Related: 525284 8.1.18-1.el54.1 - Update to PostgreSQL 8.1.18 to fix CVE-2009-0922, CVE-2009-3230, and assorted other bugs described at http://www.postgresql.org/docs/8.1/static/release.html Resolves: 525284...

SuSE9 Security Update : PostgreSQL (YOU Patch Number 12383)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...

SuSE 10 Security Update : PostgreSQL (ZYPP Patch Number 6114)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

openSUSE Security Update : postgresql (postgresql-675)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding CVE-2009-0922. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : postgresql (postgresql-675)

Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding CVE-2009-0922. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...