HP Data Protector Unspecified Local Unauthorized Access

This script is Copyright (C) 2010-2016 Tenable Network Security, Inc.


Synopsis :

The backup service running on the remote host is affected by an
unauthorized access vulnerability.

Description :

According to its version and build number, the HP Data Protector
application running on the remote host is affected by an unspecified
flaw that allows an local attacker to gain unauthorized access.

See also :

http://www.nessus.org/u?232d957b
http://seclists.org/bugtraq/2010/Jan/268

Solution :

Apply the relevant patches referenced in the HP advisory.

Risk factor :

Medium / CVSS Base Score : 4.6
(CVSS2#AV:L/AC:L/Au:N/C:P/I:P/A:P)
CVSS Temporal Score : 3.4
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Family: Misc.

Nessus Plugin ID: 44330 (hp_data_protector_unauth_axx.nasl)

Bugtraq ID: 37964

CVE ID: CVE-2009-4183