CVE-2011-4162

Name of the Vulnerable Software and Affected Versions HP Protect Tools Device Access Manager versions prior to 6.1.0.1

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This can be achieved via a long SidString argument in certain methods.

Recommendations For versions prior to 6.1.0.1, update to version 6.1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the AddUser, AddUserEx, RemoveUser, RemoveUserByGuide, RemoveUserEx, and RemoveUserRegardless methods until a patch is applied. Avoid using long SidString arguments in the affected methods to minimize the risk of exploitation.