DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-02-02 20:05
Updated : 2019-10-09 16:03
NVD link : CVE-2011-4791
Mitre link : CVE-2011-4791
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
hp
- data_protector_media_operations