Description
DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.
References
- SSRT100280 vendor-advisory
- http://zerodayinitiative.com/advisories/ZDI-11-112/