what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-67973

HP Data Protector DtbClsLogin Buffer Overflow

Posted Dec 12, 2012

Authored by AbdulAziz Hariri, juan vazquez | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in HP Data Protector 4.0 SP1. The overflow occurs during the login process, in the DtbClsLogin function provided by the dpwindtb.dll component, where the Utf8Cpy (strcpy like function) is used in an insecure way with the username. A successful exploitation will lead to code execution with the privileges of the "dpwinsdr.exe" (HP Data Protector Express Domain Server Service) process, which runs as SYSTEM by default.

tags | exploit, overflow, code execution

advisories | CVE-2010-3007, OSVDB-67973

SHA-256 | 5f48e6eddcdea7f49b54140b15408fdea2d0b9f566799a073770127a3896e0b8

Download | Favorite | View