477 matches found
CVE-2011-4791
DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field...
CVE-2011-4791
CVE-2011-4791 affects HP Data Protector Media Operations, DBServer.exe, on Windows and versions 6.11 and earlier. The vulnerability arises from handling of a crafted request with a large value in a length field, resulting in a remote code execution via a buffer/heap overflow in DBServer.exe. HP’s...
CVE-2011-4791: Improper Control of Generation of Code
DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field...
PT-2012-1962
Name of the Vulnerable Software and Affected Versions HP Data Protector Media Operations versions 6.11 and earlier Description The issue allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field. Recommendations For versions 6.11 and earlie...
HP Data Protector Media Operations Memory Corruption
A heap memory corruption vulnerability has been reported in HP Data Protector Media Operations...
HP Data Protector Backup Client Service GET_FILE Buffer Overflow (CVE-2011-1729)
A remote code execution vulnerability has been reported in HP Data Protector. The vulnerability is due to insufficient boundary checks of user-supplied parameters in the vulnerable function while handling GETFILE messages. A remote attacker could exploit this vulnerability by sending a malformed...
HP Data Protector Media Operations Heap Buffer Overflow Vulnerability
This host is running HP Data Protector Media Operations and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbhpdataprotectormediaoperationsbofvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ HP Data Protector Media Operations Heap Buffer Overflow Vulnerability Authors:...
HP Data Protector Media Operations Heap Buffer Overflow Vulnerability
HP Data Protector Media Operations is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
HP Data Protector Notebook Extension Policy Server FinishedCopy Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension Policy Server LogClientHealth Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension Policy Server LogCopyOperation Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension GetPolicies Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension Policy Server RequestCopy Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension Policy Server LogClientInstallation Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Notebook Extension Policy Server LogBackupLocationStatus Remote SQL Injection Vulnerabilty
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension. Authentication is not required to exploit this vulnerability. The flaw exists within the dpnepolicyservice component which exposes a DPNECentral Web Service on...
HP Data Protector Media Operations 6.20 - Directory Traversal
HP Data Protector Media Operations 6.20 - Directory Traversal Luigi Auriemma Application: HP Data Protector Media Operations http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-936920 Versions: = 6.20 Platforms: Windows and others Bug: directory traversal Exploitation: remote,...
HP Data Protector Media Operations 6.20 - Directory Traversal
Luigi Auriemma Application: HP Data Protector Media Operations http://www8.hp.com/us/en/software/software-product.html?compURI=tcm:245-936920 Versions: = 6.20 Platforms: Windows and others Bug: directory traversal Exploitation: remote, versus server Date: 03 Nov 2011 found 06 Jul 2011 Author: Lui...
HP Data Protector 6.10/6.11/6.20 Install Service
This module exploits HP Data Protector OmniInet process on Windows only. This exploit invokes the install service function which allows an attacker to create a custom payload in the format of an executable. To ensure this works, the SMB server created in MSF must have a share called Omniback whic...
HP Data Protector Client EXEC_CMD Command Execution (CVE-2011-0923)
A remote code execution vulnerability has been reported in HP Data Protector. The vulnerability is due to insufficient input validation of arguments passed to the EXECCMD command. A remote attacker may exploit this vulnerability by sending a specially crafted request to an affected Data Protector...
