NISCC has reported a vulnerability in HP OpenView Storage Data Protector, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a combination of an input validation error and a bad authentication mechanism in the backup agents when communicating with the central backup server (Cell Manager). This can be exploited to pass arbitrary commands to the backup agents without being authenticated by manipulating certain fields the in proprietary protocol used.

Successful exploitation allows execution of arbitrary commands on a vulnerable system.

The vulnerability is reported in versions 5.1 and 5.5 running on HP-UX, IBM AIX, Linux, Microsoft Windows, and Solaris.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
NISCC

Changelog
Further details available to Secunia VIM customers

Original Advisory
HPSBMA02138 SSRT061184:
http://itrc.hp.com/service/cki/docDisplay.do?docId=c00742778

NISCC:
http://www.uniras.gov.uk/niscc/docs/re-20060811-00547.pdf?lang=en

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers