HP DataDirect OpenAccess security vulnerabilities updated since 17.06.2012
Published:		24.06.2012
Source:		BUGTRAQ
SecurityVulns ID:		12429
Type:		remote
Level:		5/10
Description:		Few buffer overflows on traffic parsing.

Affected:		HP : HP Database Archiving Software 6.31
CVE:		CVE-2011-4165 (Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1263.)
		CVE-2011-4164 (Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1214.)
		CVE-2011-4163 (Unspecified vulnerability in HP Database Archiving Software 6.31 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1213.)

Original document		ZDI, ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability (24.06.2012)
		ZDI, ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability (17.06.2012)
		ZDI, ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability (17.06.2012)

Discuss:

Read or add your comments to this news (0 comments)