cve/2011/CVE-2011-0923.md

CVE-2011-0923

Description

The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."

POC

Reference

• http://securityreason.com/securityalert/8261
• http://securityreason.com/securityalert/8323
• http://securityreason.com/securityalert/8329

Github

• https://github.com/marcocarolasec/CVE-2016-2004-Exploit