CVE-2010-3007 - Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edi

CVE-2010-3007

Summary

Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.

References

http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02498535

Vulnerable Configurations

cpe:2.3:a:hp:data_protector_express:3.1:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.1:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp1:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp1:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:*:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.1:*:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.1:*:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp1:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp1:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp2:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:3.5:sp2:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:*:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:*:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:sp1:single_server:*:*:*:*:*
cpe:2.3:a:hp:data_protector_express:4.0:sp1:single_server:*:*:*:*:*

CVSS

Base:	7.2 (as of 09-10-2019 - 23:01)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

hp	HPSBMA02576 SSRT090231

saint via4

bid	43105
description	HP Data Protector Express DtbClsLogin function buffer overflow
osvdb	67973
title	hp_data_protector_express_dtbclslogin
type	remote

Last major update

09-10-2019 - 23:01

Published

09-09-2010 - 22:00

Last modified

09-10-2019 - 23:01