CVE-2011-0921 | BDVDB-2026-45021 Detail

Description#

crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp
http://marc.info/?l=bugtraq&m=130391284726795&w=2
http://www.vupen.com/english/advisories/2011/0308
http://zerodayinitiative.com/advisories/ZDI-11-057/
http://www.securityfocus.com/bid/46234

Exploit#

No public exploit known

History#

Version 12011-02-09Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.