CVE-2011-4157 Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.
HighCVSS 10.0
EPSS 13.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc centralized management console software | <= 9.0 | No fix listed |
| HP Inc centralized management console software | = 7.0.01-sp1 | No fix listed |
| HP Inc centralized management console software | = 8.0 | No fix listed |
| HP Inc centralized management console software | = 8.1 | No fix listed |
| HP Inc centralized management console software | = 8.5 | No fix listed |
| HP Inc saniq | <= 9.0 | No fix listed |
| HP Inc saniq | = 8.0 | No fix listed |
| HP Inc saniq | = 8.1 | No fix listed |
| HP Inc saniq | = 8.5 | No fix listed |
| HP Inc storageworks p4000 virtual san appliance | All versions | No fix listed |
References
- SSRT100279 vendor-advisory
- 47005 vdb-entry
- 51042 vdb-entry
- www.zerodayinitiative.com
- hp-storageworks-unspec-command-exec(71766) vdb-entry