Published: 14/05/2009 Updated: 09/10/2019

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 730

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote malicious users to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hp data_protector_express 3.5
hp data_protector_express 4.0

HP Data Protector is prone to a memory leak vulnerability The same vector of exploitation can be used for denial of service attack if an invalid memory address is accessed This is a Metasploit module that demonstrates this vulnerability ...

## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Auxiliary include Msf::Exploit::Remote::Tc ...

#!/usr/bin/env python #POC Memory disclosure/ Denial Of Service #HP Data protector 400-sp1 43064 #Tested for Windows Version Only ''' Buggy code @dpwinsup module of dpwingad process running at 3817/TCP port dpwinsup10275F80 100DDE89 8B15 54A72210 MOV EDX,DWORD PTR DS:[1022A754] 100DDE8F 8B82 98650000 MOV EAX,DWORD PTR DS:[EDX+6598 ...

NVD-CWE-noinfo http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543 http://secunia.com/advisories/35084 http://www.securitytracker.com/id?1022220 http://www.vupen.com/english/advisories/2009/1309 http://www.securityfocus.com/bid/34955 http://ivizsecurity.com/security-advisory-iviz-sr-09002.html https://www.exploit-db.com/exploits/9007 https://www.exploit-db.com/exploits/9006 https://nvd.nist.gov https://packetstormsecurity.com/files/78610/HP-Data-Protector-4.00-sp1-43064-Denial-Of-Service.html https://www.exploit-db.com/exploits/9007/

CVE-2009-0714

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect