PT-2011-2764

CVE-2011-0921

·

Publicado

2011-02-07

·

Atualizado

2016-08-23

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP Data Protector (affected versions not specified)
Description The issue is related to the improper validation of credentials associated with the hostname, domain, and username in the Cell Manager Service of HP Data Protector. This allows remote attackers to execute arbitrary code by sending unspecified data over TCP. The vulnerability is related to the webreporting client, the applet domain, and the java username.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
ZDI-11-057
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾