Detections
Analytics

HP Data Protector Remote Command Execution

critical Nessus Plugin ID 53641

Language:

Synopsis

The remote service allows remote execution of arbitrary commands without authentication.

Description

The remote HP Data Protector client or server service is affected by a command execution vulnerability. A malicious user can send a specially crafted packet that causes this service to execute an arbitrary shell command with system privileges.

Solution

1. Upgrade to Data Protector A.06.20 or later and

2. Enable encrypted control communication services on cell server and all clients in cell.

See Also

https://www.zerodayinitiative.com/advisories/ZDI-11-055/

https://seclists.org/bugtraq/2011/Feb/73

http://www.nessus.org/u?6ca03389

Plugin Details

Severity: Critical

ID: 53641

File Name: hp_data_protector_command_execution.nbin

Version: 1.83

Type: remote

Published: 5/3/2011

Updated: 7/17/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:hp:openview_storage_data_protector

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/25/2011

Vulnerability Publication Date: 2/7/2011

Exploitable With

CANVAS (White_Phosphorus)

Metasploit (HP Data Protector 6 EXEC_CMD Remote Code Execution)

Reference Information

CVE: CVE-2011-0923

BID: 46234