NVD

Id
7945  
Name
CVE-2011-0921  
Description
crs.exe in the Cell Manager Service in the client in HP Data Protector does not properly validate credentials associated with the hostname, domain, and username, which allows remote attackers to execute arbitrary code by sending unspecified data over TCP, related to the webreporting client, the applet domain, and the java username.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-02-08  
Modified Date
2016-08-22  
Seq
2011-0921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45071 7945 CVE-2011-0921 http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-hp  View
45072 7945 CVE-2011-0921 SSRT100441  View
45073 7945 CVE-2011-0921 46234  View
45074 7945 CVE-2011-0921 ADV-2011-0308  View
45075 7945 CVE-2011-0921 http://zerodayinitiative.com/advisories/ZDI-11-057/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34032 JVNDB-2011-004274 HP Data Protector の crs.exe における任意のコードを実行される脆弱性 HP Data Protector のクライアントの Cell Manager Service の crs.exe は、資格情報に関連付けられたホスト名、ドメインおよびユーザ名を適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-0921 48828 CVE-2011-0921 7945 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004274.html 2011-02-08 2012-03-27 View