fkie_nvd - fkie_cve-2010-3008

FKIE_CVE-2010-3008

Vulnerability from fkie_nvd - Published: 2010-09-13 21:00 - Updated: 2025-04-11 00:51

Severity ?

Summary

Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007.

References

	URL	Tags
	hp-security-alert@hp.com	http://marc.info/?l=bugtraq&m=128404562909349&w=2	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	http://marc.info/?l=bugtraq&m=128404562909349&w=2	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
hp	data_protector_express	3.1
hp	data_protector_express	3.5
hp	data_protector_express	3.5
hp	data_protector_express	4.0
hp	data_protector_express	4.0
hp	data_protector_express	3.1
hp	data_protector_express	3.5
hp	data_protector_express	3.5
hp	data_protector_express	4.0
hp	data_protector_express	4.0

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "44046D76-CF1E-4BD2-B2BC-DDAE8552EB21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.5:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "0B416366-2680-41E2-ABF9-5CD8D89C7FBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.5:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "3F5B5D2E-4692-4DA5-805E-B449CFD9DA5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "87954300-744A-4FAA-AC4E-1F1A500A8B08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:4.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "AED70E63-BA67-4A68-A121-C3E80F2D1EF0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.1:*:single_server:*:*:*:*:*",
              "matchCriteriaId": "B9F2AC98-5D46-4BC6-884F-60E6D2047B80",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.5:sp1:single_server:*:*:*:*:*",
              "matchCriteriaId": "A3FC228A-4638-41A0-BBA6-44D1C86FE834",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:3.5:sp2:single_server:*:*:*:*:*",
              "matchCriteriaId": "2B5AB9FB-79BF-456B-9698-FB8A28688CFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:4.0:*:single_server:*:*:*:*:*",
              "matchCriteriaId": "A7929FE9-5770-4E88-9A0F-15265A75CCD1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:data_protector_express:4.0:sp1:single_server:*:*:*:*:*",
              "matchCriteriaId": "76847B5C-BF40-4825-A468-7B857489570C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en HP Data Protector Express y en Data Protector Express Single Server Edition (SSE) v3.x, antes de build56936 y v4.x antes de build56906 en Windows permite a usuarios locales obtener privilegios de administraci\u00f3n o causar una denegaci\u00f3n de servicio a trav\u00e9s de vectores desconocidos. Se trata de una vulnerabilidad diferente a CVE-2010-3007."
    }
  ],
  "id": "CVE-2010-3008",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2010-09-13T21:00:28.993",
  "references": [
    {
      "source": "hp-security-alert@hp.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
    }
  ],
  "sourceIdentifier": "hp-security-alert@hp.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2010-3008 (GCVE-0-2010-3008)

Vulnerability from cvelistv5 – Published: 2010-09-13 20:00 – Updated: 2024-09-17 00:21

Summary

Severity ?

No CVSS data available.

CWE

Assigner

References

URL

Tags

	http://marc.info/?l=bugtraq&m=128404562909349&w=2	vendor-advisoryx_refsource_HP
	http://marc.info/?l=bugtraq&m=128404562909349&w=2	vendor-advisoryx_refsource_HP

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T02:55:46.718Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "HPSBMA02516",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
          },
          {
            "name": "SSRT090232",
            "tags": [
              "vendor-advisory",
              "x_refsource_HP",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2010-09-13T20:00:00Z",
        "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
        "shortName": "hp"
      },
      "references": [
        {
          "name": "HPSBMA02516",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
        },
        {
          "name": "SSRT090232",
          "tags": [
            "vendor-advisory",
            "x_refsource_HP"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "hp-security-alert@hp.com",
          "ID": "CVE-2010-3008",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 on Windows allows local users to gain privileges or cause a denial of service via unknown vectors, a different vulnerability than CVE-2010-3007."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "HPSBMA02516",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
            },
            {
              "name": "SSRT090232",
              "refsource": "HP",
              "url": "http://marc.info/?l=bugtraq\u0026m=128404562909349\u0026w=2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2",
    "assignerShortName": "hp",
    "cveId": "CVE-2010-3008",
    "datePublished": "2010-09-13T20:00:00Z",
    "dateReserved": "2010-08-13T00:00:00Z",
    "dateUpdated": "2024-09-17T00:21:45.426Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2010-3008

CVE-2010-3008 (GCVE-0-2010-3008)

Tags

Sightings

Nomenclature