HP Data Protector LogClientInstallation Method Userid Field SQL Execution

high Nessus Plugin ID 58527

Language:

Synopsis

The remote HP Data Protector install is vulnerable to a SQL injection attack.

Description

The HP Data Protector DPNECentral web service listening on this port contains a SQL injection vulnerability because it fails to properly sanitize user-supplied input to the userid field of its LogClientInstallation method before using it in a database query.
This may allow an attacker to read and write sensitive data, or possibly run arbitrary code on the server.

This vulnerability affects HP Data Protector Notebook Extension and HP Data Protector for Personal Computers.

Note that this install is likely affected by several other SQL injection vulnerabilities, though Nessus has not tested for these.

Solution

Install the DPPCWIN_00001 patch from the vendor.

Plugin Details

Severity: High

ID: 58527

File Name: hp_data_protector_policy_server_sql_injection.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 3/29/2012

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:hp:data_protector_notebook_extension

Required KB Items: www/dpnepolicyservice

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No known exploits are available

Exploited by Nessus: true

Patch Publication Date: 10/18/2011

Vulnerability Publication Date: 10/18/2011

Reference Information

CVE: CVE-2011-3156

BID: 50181

Detections

Analytics