CVE-2011-4157

Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
hpCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
VendorProductVersion
hpcentralized_management_console_software
𝑥
≤ 9.0
hpcentralized_management_console_software
7.0.01:sp1
hpcentralized_management_console_software
8.0
hpcentralized_management_console_software
8.1
hpcentralized_management_console_software
8.5
hpsan\/iq
𝑥
≤ 9.0
hpsan\/iq
8.0
hpsan\/iq
8.1
hpsan\/iq
8.5
hpstorageworks_p4000_virtual_san_appliance
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
http://www.securityfocus.com/bid/47005
http://www.securityfocus.com/bid/51042
http://www.zerodayinitiative.com/advisories/ZDI-11-111/
https://exchange.xforce.ibmcloud.com/vulnerabilities/71766
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03082086
http://www.securityfocus.com/bid/47005
http://www.securityfocus.com/bid/51042
http://www.zerodayinitiative.com/advisories/ZDI-11-111/
https://exchange.xforce.ibmcloud.com/vulnerabilities/71766