PT-2011-2764

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of credentials associated with the hostname, domain, and username in the Cell Manager Service of HP Data Protector. This allows remot...

PT-2011-2765

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue allows remote attackers to execute arbitrary programs via an EXEC SETUP command that references a UNC share pathname. This can lead to remote code execution. Recommendatio...

HP Data Protector 6.1 EXEC_CMD Command Execution

This module exploits HP Data Protector's omniinet process, specifically against a Windows setup. When an EXECCMD packet is sent, omniinet.exe will attempt to look for that user-supplied filename with kernel32!FindFirstFileW. If the file is found, the process will then go ahead execute it with...

HP Data Protector 6 EXEC_CMD Remote Code Execution

This exploit abuses a vulnerability in the HP Data Protector service. This flaw allows an unauthenticated attacker to take advantage of the EXECCMD command and traverse back to /bin/sh, this allows arbitrary remote code execution under the context of root. Module Options msf use...

PT-2011-2767

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue concerns the client in HP Data Protector, which fails to verify the contents of files associated with the EXEC CMD command. This allows remote attackers to execute arbitra...

PT-2011-2766

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of EXEC CMD arguments by the client in HP Data Protector. This allows remote attackers to execute arbitrary Perl code via a crafted...

CVE-2011-0514

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

Code injection

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

CVE-2011-0514

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

CVE-2011-0514

CVE-2011-0514 affects HP Data Protector Manager 6.11 RDS service (rds.exe). A remote attacker can crash the service by sending a oversized packet to TCP port 1530, causing a DoS. Public disclosures and PoC exist; a Metasploit auxiliary module implements the DoS. Remediation noted in at least one ...

PT-2011-2413

Name of the Vulnerable Software and Affected Versions HP Data Protector Manager version 6.11 Description The issue allows remote attackers to cause a denial of service, resulting in a crash of the RDS service, by sending a packet with a large data size to TCP port 1530. Recommendations For HP Dat...

CVE-2011-0514: Improper Restriction of Operations within the Bounds of a Memory Buffer

The RDS service rds.exe in HP Data Protector Manager 6.11 allows remote attackers to cause a denial of service crash via a packet with a large data size to TCP port 1530...

HP Data Protector Manager RDS DOS

This module causes a remote DOS on HP Data Protector's RDS service. By sending a malformed packet to port 1530, rm32.dll causes RDS to crash due to an enormous size for malloc. Module Options msf use auxiliary/dos/hp/data/protectorrds msf undefinedprotectorrds show actions ...actions... msf...

HP Data Protector Manager 6.11 Denial Of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

HP Data Protector Manager v6.11 Remote DoS in RDS Service

Exploit for windows platform in category dos / poc !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service !/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software:...

HP Data Protector Manager 6.11 - RDS Service Remote Denial of Service

!/usr/bin/perl =============================== HP Data Protector Manager v6.11 =============================== Bug: Remote Denial of Service Vulnerabilities RDS Service Software: http://h71028.www7.hp.com/enterprise/w1/en/software/information-management-data-protector.html Date: 08/01/2011 Author...

HP Data Protector Manager MMD Service Stack Buffer Overflow

Added: 12/10/2010 BID: 45128 Background HP Data Protector is a backup solution for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and devic...

HP Data Protector Manager MMD Service Stack Buffer Overflow

Added: 12/10/2010 BID: 45128 Background HP Data Protector is a backup solution for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and devic...

HP Data Protector Manager MMD Service Stack Buffer Overflow

Added: 12/10/2010 BID: 45128 Background HP Data Protector is a backup solution for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and devic...