CVE-2012-0124
HP Data Protector Express 5.0.00-59287 and 6.0.00-11974 - Remote Code Execution or Denial of Service
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-0124.
PoCs published by Metasploit, juan vazquez, sinn3r, including Metasploit module exploits/windows/misc/hp_dataprotector_new_folder.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in HP Data Protector 5 via insecure handling of folder names in dpwindtb.dll. It uses SEH overwrite and egg hunting to achieve remote code execution.
Description
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Exploits (2)
This is a Metasploit module exploiting a stack buffer overflow in HP Data Protector 5 via insecure handling of folder names in dpwindtb.dll. It uses SEH overwrite and egg hunting to achieve remote code execution.
This Metasploit module exploits a stack buffer overflow in HP Data Protector Express (CVE-2012-0124) by sending a maliciously crafted folder creation request. It uses SEH overwrite and egghunting techniques to achieve remote code execution with SYSTEM privileges.