what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

HP Data Protector Client EXEC_SETUP Code Execution

Posted May 30, 2011

Authored by fdisk

HP Data Protector Client EXEC_SETUP remote code execution proof of concept exploit.

tags | exploit, remote, code execution, proof of concept

advisories | CVE-2011-0922

SHA-256 | 74be50124dc9e7c705be0e3addd5aeb34b9d814fd5388d581dbc47f14bf3077b

Download | Favorite | View

Related Files

Zero Day Initiative Advisory 11-056

Posted Feb 7, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-056 - This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client. User interaction is not required to exploit this vulnerability. The specific flaw exists within the implementation of the EXEC_SETUP command. This command instructs a Data Protector client to download and execute a setup file. A malicious attacker can instruct the client to access a file off of a share thus executing arbitrary code under the context of the current user.

tags | advisory, remote, arbitrary

SHA-256 | 492fd0bf1744cd32de5958731638c38c61879d2a09de0c1f30417c29d37bd124

Download | Favorite | View