关键信息总结 漏洞概述 漏洞名称: HP Data Protector 6.11 Remote Buffer Overflow + DEP Bypass CVE编号: CVE-2011-1865 CWE编号: CWE-119 风险等级: 高 漏洞细节 CVSS Base Score: 10/10 CVSS Exploitability Subscore: 10/10 CVSS Impact Subscore: 10/10 攻击复杂度: 低 完整性影响: 完整 可用性影响: 完整 认证要求: 不需认证 漏洞利用关键点 测试环境: Windows 2003 R2 + DEP启用 作者: muts & dookie 漏洞类型: 远程缓冲区溢出 + DEP绕过 关键代码段: Python脚本用于生成payload，包含shellcode、WriteProcessMemory调用、以及地址计算等 绑定端口: 4444 参考链接 http://xforce.iss.net/xforce/xfdb/68281 http://www.securityfocus.com/bid/48496 http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities http://securitytracker.com/id?2025731 http://securia.com/advisories/4510 http://n20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 http://n20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182