[security bulletin] HPSBMU02731 SSRT100518 rev.1 - HP Database Archiving Software, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03128302 Version: 1 HPSBMU02731 SSRT100518 rev.1 - HP Database Archiving Software, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soo...

CVE-2011-4165

Summary (CVE-2011-4165) : HP Database Archiving Software 6.31 is affected by a remote code execution vulnerability identified as ZDI-12-099. The issue arises from how the application parses a received packet: it uses a signed length to copy data into a heap-based, fixed-size buffer, enabling heap...