Executive Summary

Informations
Name CVE-2011-1865 First vendor Publication 2011-07-01
Vendor Cve Last vendor Modification 2017-08-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 10 Attack Range Network
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 10 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1865

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-119 Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4

SAINT Exploits

Description Link
HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow More info here

ExploitDB Exploits

id Description
2011-06-30 HP Data Protector 6.20 EXEC_CMD Buffer Overflow Vulnerability
2011-06-29 HP Data Protector 6.20 Multiple Vulnerabilities

OpenVAS Exploits

Date Description
2011-07-01 Name : HP Data Protector Multiple Remote Code Execution Vulnerabilities
File : nvt/secpod_hp_data_protector_mult_code_exec_vuln.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
73571 HP OpenView Storage Data Protector inet Crafted Parameter Multiple Remote Ove...

Information Assurance Vulnerability Management (IAVM)

Date Description
2011-07-07 IAVM : 2011-B-0075 - Multiple Vulnerabilities in HP OpenView Storage Data Protector
Severity : Category I - VMSKEY : V0029343

Snort® IPS/IDS

Date Description
2014-01-10 HP OpenView Storage Data Protector buffer overflow attempt
RuleID : 20761 - Revision : 6 - Type : SERVER-OTHER
2014-01-10 HP OpenView Storage Data Protector buffer overflow attempt
RuleID : 20135 - Revision : 3 - Type : SERVER-OTHER
2014-01-10 HP OpenView Storage Data Protector buffer overflow attempt
RuleID : 20134 - Revision : 14 - Type : SERVER-OTHER

Nessus® Vulnerability Scanner

Date Description
2011-07-11 Name : The remote Windows host has an application that is affected by multiple vulne...
File : hp_data_protector_0620_multiple_vulns_creds.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/48486
EXPLOIT-DB http://www.exploit-db.com/exploits/17458
http://www.exploit-db.com/exploits/17467
http://www.exploit-db.com/exploits/17468
http://www.exploit-db.com/exploits/17490
HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182
MISC http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities
SECTRACK http://securitytracker.com/id?1025731
SECUNIA http://secunia.com/advisories/45100
SREASON http://securityreason.com/securityalert/8288
http://securityreason.com/securityalert/8290
http://securityreason.com/securityalert/8291
http://securityreason.com/securityalert/8295
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/68281

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
Date Informations
2021-05-04 12:14:29
  • Multiple Updates
2021-04-22 01:15:46
  • Multiple Updates
2020-05-23 13:16:57
  • Multiple Updates
2020-05-23 00:28:31
  • Multiple Updates
2017-08-17 09:23:32
  • Multiple Updates
2016-04-26 20:45:25
  • Multiple Updates
2014-02-17 11:02:17
  • Multiple Updates
2014-01-19 21:27:47
  • Multiple Updates
2013-11-11 12:39:22
  • Multiple Updates
2013-05-10 23:00:14
  • Multiple Updates