CVE-2011-3160

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...

Code injection

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222...

CVE-2011-3156

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222...

CVE-2011-3158

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226...

CVE-2011-3159

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...

CVE-2011-3160

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228...

CVE-2011-3161

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229...

CVE-2011-3162

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3157

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...

CVE-2011-3162

HP Data Protector Notebook Extension 6.20 and HP Data Protector for Personal Computers 7.0 are affected by an SQL injection vulnerability in the dpnepolicyservice FinishedCopy method, exposed via a DPNECentral Web Service on TCP port 80. A remote attacker can craft requests with an unsafely used ...

CVE-2011-3161

HP Data Protector Notebook Extension contains a remote code execution vulnerability in the dpnepolicyservice component (LogBackupLocationStatus method) that accepts unsafely validated input. This flaw is exploitable without authentication via the DPNECentral Web Service on TCP port 80, enabling a...

CVE-2011-3160

HP Data Protector Notebook Extension has a remote code execution vulnerability (ZDI-1228) affecting dpnepolicyservice via LogCopyOperation. The flaw exists in the DPNECentral Web Service on TCP port 80; the copyStatus field from a user request is used to construct a query without proper validatio...

CVE-2011-3159

HP Data Protector Notebook Extension (v6.20) and HP Data Protector for Personal Computers (v7.0) contain a remote code execution risk via the dpnepolicyservice Web Service (LogClientHealth method) in the Notebook Extension. The ZDI advisory ZDI-11-323 notes the dpnepolicyservice on TCP port 80 do...

CVE-2011-3158

HP Data Protector Notebook Extension contains a remote SQL injection in the dpnepolicyservice component (RequestCopy) exposed on TCP port 80. Unauthenticated attackers can craft a RequestCopy with a malicious type, causing the service to construct and execute arbitrary SQL queries under the servi...

CVE-2011-3157

HP Data Protector Notebook Extension contains a vulnerability in the dpnepolicyservice GetPolicies method that does not properly validate the clientVersion field, enabling remote attackers to execute arbitrary SQL queries as the service user. Affected products include HP Data Protector Notebook E...