HP Data Protector CRS Opcode 1092 Stack Buffer Overflow (CVE-2013-2331)

A stack buffer overflow has been discovered in HP Data Protector...

CVE-2013-2331

HP Data Protector (v6.20/v6.21/v7.00/v7.01) is vulnerable to a remote code execution due to a stack-based buffer overflow in crs.exe when parsing opcode 1092. The issue, ZDI-CAN-1652, allows unauthenticated, remote attackers to execute arbitrary code (SYSTEM context) on vulnerable installations. ...

[security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03781657 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03781657 Version: 1 HPSBMU02883...