PT-2010-4480 · Hewlett Packard · Hp Data Protector Express+1

Publicado 2010-09-09 · Atualizado 2019-10-09 · CVE-2010-3007

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 3.x before build 56936 HP Data Protector Express versions 4.x before build 56906 HP Data Protector Express Single Server Edition (SSE) versions 3.x before build 56936 HP Data Protector Express Single Server Edition (SSE) versions 4.x before build 56906

Description The issue allows local users to gain privileges or cause a denial of service. The estimated number of potentially affected devices and details about real-world incidents are not specified. Technical details about exploitation, such as API endpoints, vulnerable parameters or variables, and function names, are not provided.

Recommendations For HP Data Protector Express versions 3.x, update to build 56936 or later. For HP Data Protector Express versions 4.x, update to build 56906 or later. For HP Data Protector Express Single Server Edition (SSE) versions 3.x, update to build 56936 or later. For HP Data Protector Express Single Server Edition (SSE) versions 4.x, update to build 56906 or later.

Exploit

Correção

Identificadores relacionados

CVE-2010-3007

ZDI-10-174

Produtos afetados

Hp Data Protector Express

Hp Data Protector Express Single Server Edition

Referências · 5

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_dataprotector_dtbclslogin.rb · Exploit
• 🔥 https://exploit-db.com/exploits/23290 · Exploit
• http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02498535 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-10-174 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2010-3007 · Nota de Segurança