CVE-2011-4162

The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

7.65% chance of exploitation in the next 30 days, 95th percentile

Published

2011-12-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/36403

Security advisories

• http://marc.info/?l=bugtraq&m=132284686204608&w=2

References

• CVE Record
• NVD entry