RCE in HP Data Protector Media Operations

CVE-2011-4791

DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.087 (94.6th percentile) — read the EPSS interpretation.

Affected products

Hp Data_protector_media_operations — versions 5.0, 5.1, 5.5
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

hp-security-alert@hp.com (x_refsource_HP, vendor-advisory)
hp-security-alert@hp.com (x_refsource_MISC)