1707 matches found
CVE-2011-0923: Improper Input Validation
The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...
CVE-2011-0923
The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...
CVE-2011-0923
HP Data Protector 6.1 contains a remote code execution flaw in the omniinet service treated via EXEC_CMD handling. A crafted EXEC_CMD packet can cause the process to interpret user-supplied input as part of a filename, leading to arbitrary command execution (notably via perl.exe in {install_path}...
CVE-2011-0921: Improper Input Validation
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the...
CVE-2011-0921
The CVE-2011-0921 issue affects HP OpenView Storage Data Protector, specifically the CRs.exe Cell Manager Service in the client. The vulnerability arises from improper validation of credentials tied to hostname, domain, and username, permitting remote execution of arbitrary code by sending data o...
CVE-2011-0924
The client in HP Data Protector does not verify the contents of files associated with the EXECCMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, as demonstrated by omnichkds.sh...
CVE-2011-0924
HP OpenView Storage Data Protector (Data Protector) client vulnerable via the EXEC_CMD handling: it does not verify file contents, allowing remote code execution by embedding malicious code in a file and using a trusted filename (e.g., omni_chk_ds.sh). Affected versions include Data Protector v6....
CVE-2011-0924: Improper Input Validation
The client in HP Data Protector does not verify the contents of files associated with the EXECCMD command, which allows remote attackers to execute arbitrary script code by providing this code with a trusted filename, as demonstrated by omnichkds.sh...
PT-2011-2765
Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue allows remote attackers to execute arbitrary programs via an EXEC SETUP command that references a UNC share pathname. This can lead to remote code execution. Recommendatio...
PT-2011-2767
Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue concerns the client in HP Data Protector, which fails to verify the contents of files associated with the EXEC CMD command. This allows remote attackers to execute arbitra...
PT-2011-2764
Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of credentials associated with the hostname, domain, and username in the Cell Manager Service of HP Data Protector. This allows remot...
(0Day) Hewlett-Packard Data Protector Cell Manager Service Authentication Bypass Vulnerability
This vulnerability allows an attacker to execute remote code on vulnerable installations of Hewlett-Packard Data Protector. User interaction is not required to exploit this vulnerability. The specific flaw exists within the Cell Manager Service which listens by default on a random TCP port. The...
(0Day) Hewlett-Packard Data Protector Client EXEC_CMD omni_chk_ds.sh Remote Code Execution Vulnerability
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client. User interaction is not required to exploit this vulnerability. The specific flaw exists within the filtering of the EXECCMD command. The Data Protector client on...
(0Day) Hewlett-Packard Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client. User interaction is not required to exploit this vulnerability. The specific flaw exists within the filtering of arguments to the EXECCMD command. The Data...
(0Day) Hewlett-Packard Data Protector Client EXEC_SETUP Remote Code Execution Vulnerability
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client. User interaction is not required to exploit this vulnerability. The specific flaw exists within the implementation of the EXECSETUP command. This command instruct...
PT-2011-2766
Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of EXEC CMD arguments by the client in HP Data Protector. This allows remote attackers to execute arbitrary Perl code via a crafted...
HP Data Protector 6.1 EXEC_CMD Command Execution
This module exploits HP Data Protector's omniinet process, specifically against a Windows setup. When an EXECCMD packet is sent, omniinet.exe will attempt to look for that user-supplied filename with kernel32!FindFirstFileW. If the file is found, the process will then go ahead execute it with...
HP Data Protector 6 EXEC_CMD Remote Code Execution
This exploit abuses a vulnerability in the HP Data Protector service. This flaw allows an unauthenticated attacker to take advantage of the EXECCMD command and traverse back to /bin/sh, this allows arbitrary remote code execution under the context of root. Module Options msf use...
