PT-2010-4481 · Hewlett Packard · Hp Data Protector Express+1

Abdulaziz Hariri · Published 2010-09-13 · Updated 2019-10-09 · CVE-2010-3008

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Data Protector Express versions 3.x through 3.x before build 56936 HP Data Protector Express versions 4.x through 4.x before build 56906 HP Data Protector Express Single Server Edition (SSE) versions 3.x through 3.x before build 56936 HP Data Protector Express Single Server Edition (SSE) versions 4.x through 4.x before build 56906

Description The issue allows local users to gain privileges or cause a denial of service. The vulnerability can be exploited via unknown vectors.

Recommendations For HP Data Protector Express versions 3.x through 3.x before build 56936, update to build 56936 or later. For HP Data Protector Express versions 4.x through 4.x before build 56906, update to build 56906 or later. For HP Data Protector Express Single Server Edition (SSE) versions 3.x through 3.x before build 56936, update to build 56936 or later. For HP Data Protector Express Single Server Edition (SSE) versions 4.x through 4.x before build 56906, update to build 56906 or later.

Fix

Related Identifiers

CVE-2010-3008

ZDI-10-175

Affected Products

Hp Data Protector Express

Hp Data Protector Express Single Server Edition

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-3008 · Security Note
• http://marc.info/?l=bugtraq&m=128404562909349&w=2 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-10-175 · Security Note