983 matches found
Code injection
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges...
CVE-2019-11660
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges...
CVE-2019-11660
CVE-2019-11660 affects Micro Focus Data Protector (versions 10.00–10.40). A low-privilege user can abuse the SUID binary omniresolve, which calls oracleasm via a relative path using a trusted PATH, to execute a custom binary with root privileges. Impact is local privilege escalation (affecting co...
CVE-2019-11660
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges. Recent assessments: pbarry-r7 at November 20, 2019 3:15p...
CVE-2019-11660: Untrusted Search Path
Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges...
PT-2019-12462 · Micro Focus · Hp Data Protector
Name of the Vulnerable Software and Affected Versions: Micro Focus Data Protector versions 10.00 through 10.40 Description: The issue allows for privileges manipulation, potentially enabling a low-privileged user to execute a custom binary with higher privileges. Recommendations: For versions 10....
Micro Focus (HPE) Data Protector SUID Privilege Escalation
This module exploits the trusted $PATH environment variable of the SUID binary omniresolve in Micro Focus HPE Data Protector A.10.40 and prior. The omniresolve executable calls the oracleasm binary using a relative path and the trusted environment $PATH, which allows an attacker to execute a cust...
Non Compliant HP Data Protector
...
CVE-2019-3476
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...
CVE-2019-3476
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...
Design/Logic Flaw
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...
CVE-2019-3476
CVE-2019-3476 involves Micro Focus Data Protector, affected version 10.03, with remote arbitrary code execution. According to the provided documents, the vulnerability allows network-triggered code execution with low attack complexity and no authentication (CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...
CVE-2019-3476
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...
CVE-2019-3476: Undefined Security Weakness
Remote arbitrary code execution in Micro Focus Data Protector, version 10.03 this vulnerability could allow remote arbitrary code execution...
HP Data Protector Backup Client Service Code Execution - Ver2 (CVE-2011-0922)
HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The backup agent supports various message types in its communication with clients in...
Hp Data Protector Remote Client EXEC_CMD Code Execution - Ver2 (CVE-2011-0923)
A remote code execution vulnerability exists in Hp Data Protector. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
VulnCheck KEV: CVE-2014-2623
Unspecified vulnerability in HP Storage Data Protector 8.x allows remote attackers to execute arbitrary code via unknown vectors...
The vulnerability of the HPE Data Protector backup software arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the HPE Data Protector backup tool arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...