Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:HP-DATA-PRTCTR-EXEC-BAR-CE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
HP Data Protector EXEC_BAR Command Execution |
Release Date |
2014/03/02 |
Update Number |
2350 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: HP Data Protector EXEC_BAR Command Execution
This signature detects attempts to exploit a known vulnerability in the HP Data Protector. A successful attack can lead to arbitrary command execution.
Extended Description
The Backup Client Service (OmniInet.exe) in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXEC_BAR packet to TCP port 5555, aka ZDI-CAN-1885.
Affected Products
- Hp storage_data_protector 6.20
- Hp storage_data_protector 6.21
References