Multiple vulnerabilities have been reported in HP Data Protector, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.

1) An error in the client within the omni_chk_ds.sh script when processing the "EXEC_CMD" command can be exploited to provide and execute a malicious script file.

2) An input validation error in the client when processing the "EXEC_CMD" command to execute files in the local bin directory can be exploited to interact with a Perl interpreter via specially crafted input.

3) An error in the client when processing the "EXEC_SETUP" command to download and execute a setup file can be exploited to execute an arbitrary file.

Successful exploitation of these vulnerabilities may allow execution of arbitrary code, but may require tricking a client into connecting to a malicious server.

4) An error in the Cell Manager Service (crs.exe) when validating the username, domain, and hostname credentials can be exploited to gain administrative access to the management server.

Successful exploitation of this vulnerability may allow execution of arbitrary code on all clients managed by the Cell manager.

The vulnerabilities are reported in versions 6.00, 6.10, and 6.11 for Windows, HP-UX, Linux, and Solaris.

Solution
Update to version A.06.20, which fixes vulnerabilities #1, #3, and #4.
Further details available to Secunia VIM customers

Provided and/or discovered by
An anonymous person via ZDI.

Additional information about incomplete fix for vulnerability #2 provided by sinn3r.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-054/
http://www.zerodayinitiative.com/advisories/ZDI-11-055/
http://www.zerodayinitiative.com/advisories/ZDI-11-056/
http://www.zerodayinitiative.com/advisories/ZDI-11-057/

HPSBMA02654 SSRT100441:
http://www11.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02781143

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers