Hewlett-Packard Data Protector Backup Client Service Opcode 42 Remote Code Execution Vulnerability

🗓️ 10 Jan 2014 00:00:00Reported by Brian GorencHP Zero Day InitiativeType

zdi🔗 www.zerodayinitiative.com👁 29 Views

Hewlett-Packard Data Protector Backup Client Service Opcode 42 Remote Code Execution Vulnerability allows remote attackers to execute code on vulnerable installations of HP Data Protector. Authentication not required to exploit the flaw. Vulnerability exists in OmniInet.exe, listening on TCP port 5555 with insufficient sanitization on user-supplied data, leading to directory traversing arbitrary file write and remote code execution as SYSTEM user

Reporter	Title	Published	Views	Family All 22
0day.today	HP Data Protector Backup Client Service Directory Traversal	21 Jan 201400:00	–	zdt
Circl	CVE-2013-6194	24 Jan 201400:00	–	circl
Check Point Advisories	HP Data Protector Opcode 42 Directory Traversal (CVE-2013-6194)	12 Mar 201400:00	–	checkpoint_advisories
Check Point Advisories	HP Data Protector Opcode 42 Directory Traversal - Ver2 (CVE-2013-6194)	26 Mar 201500:00	–	checkpoint_advisories
CVE	CVE-2013-6194	4 Jan 201402:00	–	cve
Cvelist	CVE-2013-6194	4 Jan 201402:00	–	cvelist
Exploit DB	HP Data Protector - Backup Client Service Directory Traversal (Metasploit)	24 Jan 201400:00	–	exploitdb
Tenable Nessus	HP-UX PHSS_43889 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Cell Server patch	27 Apr 201400:00	–	nessus
Tenable Nessus	HP-UX PHSS_43890 : s700_800 11.X OV DP7.00 HP-UX IA/PA - Core patch	27 Apr 201400:00	–	nessus
Tenable Nessus	HP Data Protector Multiple Vulnerabilities (HPSBMU02895 SSRT101253)	6 Jan 201400:00	–	nessus