Security Advisory
CVE-2011-0923
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The client in HP Data Protector does not properly validate EXEC_CMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."