CVE-2014-5160 in Data Protector
Summary
** DISPUTED ** Multiple directory traversal vulnerabilities in crs.exe in the Cell Request Service in HP Data Protector allow remote attackers to create arbitrary files via an opcode-1091 request, or create or delete arbitrary files via an opcode-305 request. NOTE: the vendor reportedly asserts that this behavior is "by design."
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
07/31/2014
Disclosure
08/01/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 70532 | HP Data Protector crs.exe path traversal | 22 | Not defined | Not defined | CVE-2014-5160 |