Signature Detail
Short Name |
APP:HP-DATA-PROTECTOR-SQL |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
HP Data Protector LogClientInstallation SQL Injection |
Release Date |
2013/01/07 |
Update Number |
2222 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: HP Data Protector LogClientInstallation SQL Injection
This signature detects attempts to exploit a known vulnerability in HP Data Protector. Attackers can execute arbitrary SQL commands on the server.
Extended Description
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222.
Affected Products
- hp data_protector_for_personal_computers 7.0
- hp data_protector_notebook_extension 6.20
References
- CVE: CVE-2011-3156