CVE-2011-4162
published 2011-12-05CVE-2011-4162: The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access…
PriorityP354high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
7.98%
94.0th percentile
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | protecttools_device_access_manager | <= 6.0.0.12 | — |
| hp | protecttools_device_access_manager | — | — |
| hp | protecttools_device_access_manager | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Exploit triggers heap memory corruption by passing an overly long SidString argument (1044 'X' characters) to the AddUser method of HP PTDAM COM object ↗
- →Vulnerable methods to monitor for abnormally long SidString arguments: AddUser, AddUserEx, RemoveUser, RemoveUserByGuide, RemoveUserEx, RemoveUserRegardless in HP Protect Tools Device Access Manager (PTDAM) ↗
- ·Vulnerability only affects HP Protect Tools Device Access Manager (PTDAM) versions prior to 6.1.0.1; patched at version 6.1.0.1 ↗
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat4.7MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vj2w-v7gw-3jfp: The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Devi
ghsa_unreviewed·2022-05-17
CVE-2011-4162 [HIGH] CWE-119 GHSA-vj2w-v7gw-3jfp: The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Devi
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Red Hat
kernel: bio: integer overflow page count when mapping/copying user data
vendor_redhat·2010-11-10·CVSS 4.7
CVE-2010-4162 [MEDIUM] CWE-190 kernel: bio: integer overflow page count when mapping/copying user data
kernel: bio: integer overflow page count when mapping/copying user data
Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
Statement: This issue did not affect the versions of Linux kernel as shipped with Red Hat
Enterprise Linux 4 and 5 as they did not backport the upstream commit c5dec1c3 that introduced the issue. This has been addressed in Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG via https://rhn.redhat.com/errata/RHSA-2011-0007.html and https://rhn.redhat.com/errata/RHSA-2011-0330.html.
No detection rules found.
No writeups or analysis indexed.
http://marc.info/?l=bugtraq&m=132284686204608&w=2http://marc.info/?l=bugtraq&m=134152032516062&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/71600https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.htmlhttp://marc.info/?l=bugtraq&m=132284686204608&w=2http://marc.info/?l=bugtraq&m=134152032516062&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/71600https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html
2011-12-05
Published