{"vulnerability": "CVE-2012-0124", "sightings": [{"uuid": "6a41432f-7cf7-41c2-953c-a8e98dfcca4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0124", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "05ebe6db-a6dd-4c6f-a41b-b8938a86f710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0124", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:01.000000Z"}, {"uuid": "4595f118-c26a-41d6-9457-ded8bcf86bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_dataprotector_new_folder.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d957655d-e2a3-4d8f-b52c-27b4e0afe1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0124", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/19484", "content": "", "creation_timestamp": "2012-07-01T00:00:00.000000Z"}, {"uuid": "28ff5adb-767f-4c99-a421-41eb46aa2217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0124", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_dataprotector_new_folder.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"juan vazquez \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in HP Data Protector 5. The overflow\\n          occurs in the creation of new folders, where the name of the folder is handled in a\\n          insecure way by the dpwindtb.dll component. While the overflow occurs in the stack, the\\n          folder name is split in fragments in this insecure copy. Because of this, this module\\n          uses egg hunting to search a non corrupted copy of the payload in the heap. On the other\\n          hand the overflowed buffer is stored in a frame protected by stack cookies, because of\\n          this SEH handler overwrite is used.\\n\\n          Any user of HP Data Protector Express is able to create new folders and trigger the\\n          vulnerability. Moreover, in the default installation the 'Admin' user has an empty\\n          password. Successful exploitation will lead to code execution with the privileges of\\n          the \\\"dpwinsdr.exe\\\" (HP Data Protector Express Domain Server Service) process, which\\n          runs as SYSTEM by default.\", \"disclosure_date\": \"2012-03-12\", \"fullname\": \"exploit/windows/misc/hp_dataprotector_new_folder\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"HP Data Protector Create New Folder Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/misc/hp_dataprotector_new_folder.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"windows/misc/hp_dataprotector_new_folder\", \"references\": [\"CVE-2012-0124\", \"OSVDB-80105\", \"BID-52431\", \"URL-https://www.rapid7.com/blog/post/2012/07/06/an-example-of-egghunting-to-exploit-cve-2012-0124\"], \"rport\": 3817, \"session_types\": false, \"targets\": [\"HP Data Protector Express 6.0.00.11974 / Windows XP SP3\", \"HP Data Protector Express 5.0.00.59287 / Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:17.891645Z"}]}