The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."
References
Configurations
Information
Published : 2011-02-08 17:00
Updated : 2016-08-22 19:03
NVD link : CVE-2011-0923
Mitre link : CVE-2011-0923
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
hp
- data_protector