CVE-2011-3159

HP Data Protector Notebook Extension (v6.20) and HP Data Protector for Personal Computers (v7.0) contain a remote code execution risk via the dpnepolicyservice Web Service (LogClientHealth method) in the Notebook Extension. The ZDI advisory ZDI-11-323 notes the dpnepolicyservice on TCP port 80 do...

CVE-2011-3159

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...

CVE-2011-3160

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228...

PT-2011-4279

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability...

CVE-2011-3160: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1228...

PT-2011-4276

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability...

PT-2011-4278

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability...

PT-2011-4281

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability...

PT-2011-4282

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability...

PT-2011-4277

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is described as a remote SQL injection vulnerability in the...

PT-2011-4280

Name of the Vulnerable Software and Affected Versions HP Data Protector Notebook Extension version 6.20 HP Data Protector for Personal Computers version 7.0 Description The issue allows remote attackers to execute arbitrary code. It is also described as a remote SQL injection vulnerability in the...

CVE-2011-3158: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226...

CVE-2011-3157: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...

CVE-2011-3161: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229...

CVE-2011-3162: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...

CVE-2011-3159: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...

CVE-2011-3156: Undefined Security Weakness

Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222...

HP Data Protector Backup Client Service GET_FILE Directory Traversal (CVE-2011-1736)

A directory traversal vulnerability has been reported in HP Data Protector's backup client service. HP Data Protector is an automatic data backup and recovery software solution, for applications in both physical and virtual environments. The vulnerability is due to insufficient sanitization in th...

HP Data Protector Remote Root Shell for Linux

Exploit for linux platform in category remote exploits !/bin/bash Exploit Title: HP Data Protector Remote Root Shell for Linux Date: 2011-08-10 Author: SZ Software Link:http://www8.hp.com/us/en/software/software- product.html?compURI=tcm:245-936920&pageTitle=data-protector Version: 0.9 Tested on:...

HP Data Protector (Linux) - Remote Command Execution

!/bin/bash Exploit Title: HP Data Protector Remote Root Shell for Linux Date: 2011-08-10 Author: SZ Software Link:http://www8.hp.com/us/en/software/software- product.html?compURI=tcm:245-936920&pageTitle=data-protector Version: 0.9 Tested on: HP-UX, Linux CVE: CVE-2011-0923 Notes: ZDI-11-055...