CVE-2014-5160 Information

Description

LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks DISPUTED LICENSE README.md cvefilelist cvelist nvdcve nvdpages.sh scripts test-CVE-2017-1882.markdown test-CVE-2017-18822.markdown tmpvendorlinks Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is \by design.\

Reference

http://zerodayinitiative.com/advisories/ZDI-14-262/ http://zerodayinitiative.com/advisories/ZDI-14-263/

Share on: