CVE-2011-1865

EPSS 88.9%

Vexday Risk Score

60Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 88.9%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Ciclo de vida

29 jun 2011Exploit Metasploit disponible

29 jun 2011PoC pública

01 jul 2011Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 8

cve_referencewww.exploit-db.com/exploits/17458no verificado cve_referencewww.exploit-db.com/exploits/17467no verificado cve_referencewww.exploit-db.com/exploits/17468no verificado cve_referencewww.exploit-db.com/exploits/17490no verificado exploitdbwww.exploit-db.com/exploits/17458no verificado exploitdbwww.exploit-db.com/exploits/17467no verificado exploitdbwww.exploit-db.com/exploits/17468no verificado exploitdbwww.exploit-db.com/exploits/17490no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 http://secunia.com/advisories/45100 http://securityreason.com/securityalert/8288 http://securityreason.com/securityalert/8290 http://securityreason.com/securityalert/8291 http://securityreason.com/securityalert/8295 http://securitytracker.com/id?1025731 https://exchange.xforce.ibmcloud.com/vulnerabilities/68281 http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities http://www.exploit-db.com/exploits/17458 http://www.exploit-db.com/exploits/17467 http://www.exploit-db.com/exploits/17468