CVE-2010-3007 Privilege escalation in n/a
Local attackers can escalate privileges or cause denial of service in HP Data Protector Express via unspecified vectors.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-3007?
CVE-2010-3007 is a high-severity vulnerability in n/a, published on 9 Sep 2010. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.
Which versions are affected by CVE-2010-3007?
It affects 1 product.
Products include Hp Data Protector Express.
How do I fix CVE-2010-3007?
No fix has been published for CVE-2010-3007 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-3007 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2010-3007 exists.
Public exploit code: 1 Metasploit module and 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-89jp-7f7p-29p6.