CVEvulnerability
CVE-2011-4162
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-12-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.
Affected configurations
• hp protecttools device access manager (<= 6.0.0.12)
• hp protecttools device access manager 6.0.0.9
• hp protecttools device access manager 6.0.0.10
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=bugtraq&m=132284686204608&w=2 Vendor Advisory
- http://marc.info/?l=bugtraq&m=134152032516062&w=2 marc.info
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71600 exchange.xforce.ibmcloud.com
- https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html Exploit
- http://marc.info/?l=bugtraq&m=132284686204608&w=2 Vendor Advisory
- http://marc.info/?l=bugtraq&m=134152032516062&w=2 marc.info
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71600 exchange.xforce.ibmcloud.com
- https://www.htbridge.ch/advisory/heap_memory_corruption_in_hp_device_access_manager_for_protect_tools_information_store.html Exploit