HP Database Archiving Software Remote Arbitrary Code Execution Vulnerability

Release date: 2011-12-29
Updated on: 2011-12-31

Affected Systems:
HP Database Archiving Software 6.31
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51205
CVE (CAN) ID: CVE-2011-4163, CVE-2011-4164, CVE-2011-4165

HP Database Archiving Software provides comprehensive compliance and data growth management for key databases.

HP Database Archiving Software has a remote code execution vulnerability, which can be exploited to execute arbitrary code in affected applications.

<* Source: HP

Link: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

HP
--
HP has released a Security Bulletin (HPSBMU02731) for this purpose and the corresponding patch:

HPSBMU02731: SSRT100518 rev.1-HP Database Archiving Software, Remote Execution of Arbitrary Code

Link: http://h20566.www2.hp.com/portal/site/hpsc/public/kb/secBullArchive/