Detections
Analytics
HP Data Protector Express < 4.x build 56906 / 3.x build 56936 Multiple Vulnerabilities
critical Nessus Plugin ID 49645
Language:
Synopsis
The remote Windows host contains an application that is affected by a multiple remote vulnerabilities.Description
HP Data Protector Express is installed on the remote host. The installed version of the software is affected by multiple remote vulnerabilities including a buffer overflow and a NULL pointer deference. An attacker could leverage these vulnerabilities to execute remote code or cause a denial of service attack on the affected host.Solution
Install HP Data Protector Express 4.0 SP1 build 56906 / 3.5 SP2 build 56936 or later.See Also
https://www.zerodayinitiative.com/advisories/ZDI-10-174/
https://www.zerodayinitiative.com/advisories/ZDI-10-175/
Plugin Details
Severity: Critical
ID: 49645
File Name: hp_data_protector_exp_multiple.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 9/22/2010
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:hp:data_protector_express
Required KB Items: SMB/HP Data Protector Express/Path, SMB/HP Data Protector Express/Version, SMB/HP Data Protector Express/Build
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 9/8/2010
Vulnerability Publication Date: 9/8/2010
Exploitable With
Core Impact
Metasploit (HP Data Protector DtbClsLogin Buffer Overflow)
Reference Information
CVE: CVE-2010-3007, CVE-2010-3008
Secunia: 41361