CVE-2011-0922
HP Data Protector - Remote Code Execution via EXEC_SETUP Command
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2011-0922.
PoCs published by Ben Turner, fdiskyou, including Metasploit module exploits/windows/misc/hp_dataprotector_install_service.
AI-analyzed exploit summary This Metasploit module exploits a remote code execution vulnerability in HP Data Protector's omniinet process by leveraging an SMB share to drop and execute a malicious payload. It targets versions 6.10, 6.11, and 6.20 on Windows systems.
Description
The client in HP Data Protector allows remote attackers to execute arbitrary programs via an EXEC_SETUP command that references a UNC share pathname.
Exploits (4)
This Metasploit module exploits a remote code execution vulnerability in HP Data Protector's omniinet process by leveraging an SMB share to drop and execute a malicious payload. It targets versions 6.10, 6.11, and 6.20 on Windows systems.
This exploit targets CVE-2011-0922 in HP Data Protector Client (versions 6.11 & 6.20) by sending a crafted payload to execute a remote command. It leverages a share path to execute 'installservice.exe' with SYSTEM privileges.
This PoC exploits CVE-2011-0922 in HP Data Protector by crafting a malicious packet to trigger remote code execution via the EXEC_SETUP command. It instructs the target to download and execute a payload from a specified share or HTTP location.
This Metasploit module exploits a vulnerability in HP Data Protector's OmniInet service to achieve remote code execution by creating a custom payload executable. It leverages the install service function to execute arbitrary code on the target system.