What is CVE-2011-0923?

CVE-2011-0923 is a vulnerability in Hp Data_protector, classified under Improper Input Validation. Published 2011-02-09.

Is CVE-2011-0923 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Hp Data_protector

CVE-2011-0923

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.899 (99.6th percentile) — read the EPSS interpretation.

Affected products

Hp Data_protector
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_MISC)
SSRT100441 (x_refsource_HP, vendor-advisory)
8261 (x_refsource_SREASON, third-party-advisory)
ADV-2011-0308 (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
8323 (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (x_refsource_MISC)
8329 (x_refsource_SREASON, third-party-advisory)
46234 (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2011-0923?: CVE-2011-0923 is a vulnerability in Hp Data_protector, classified under Improper Input Validation. Published 2011-02-09.
Is CVE-2011-0923 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.