Buffer overflow in HP Protecttools Device Access Manager
CVE-2011-4162
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Vulnerability class: Buffer Overflow
EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.
Affected products
- Hp Protecttools_device_access_manager — versions 6.0.0.9, 6.0.0.10
- N/a — versions n/a
Weakness classification (CWE)
References
- hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (Vendor Advisory, x_refsource_HP, vendor-advisory)
- hp-security-alert@hp.com (Exploit, x_refsource_MISC)
- hp-security-alert@hp.com (vdb-entry, x_refsource_XF)