Intrusion Prevention

HP.Data.Protector.Multiple.Products.FinishedCopy.SQL.Injection

Description

This indicates an attack attempt to exploit a SQL Injection vulnerability in HP Data Protector Notebook Extension and HP Data Protector for Personal
Computers.
The vulnerability is a result of the application's failure to properly sanitize user input in the administrator interface. As a result, a remote attacker can leverage this vulnerability to execute arbitrary SQL queries on a target system.

Affected Products

HP Data Protector for Personal Computers 7.0 and prior
HP Data Protector Notebook Extension 6.20 and prior

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply patches or fixes, available from the website:
https://h20565.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03058866&ac.
admitted=1321285525395.876444892.492883150

CVE References

CVE-2011-3162