CVE-2011-4162 | BDVDB-2026-48346 Detail

Description#

The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=134152032516062&w=2
http://marc.info/?l=bugtraq&m=132284686204608&w=2
https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/71600

Exploit#

No public exploit known

History#

Version 12011-12-05Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.