With document ID c02810240 on 2011/04/28 an advisory for HP Data Protector 6.11 (6.10 and 6.00) was released, which describes a potential security problem when using Data Protector and in some circumstances a remote execution of arbitrary code may possible.
There is a solution, upgrade to Data Protector 6.2. Only Windows operating systems are affected.
The complete advisory can be read here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240&jumpid=em_alerts_us-us_May11_xbu_all_all_1242402_79779_software_critical_009_0
Category Archives: Advisory
VEPA DPWIN_00490 / DPWIN_00494
There exists a warning when installing VEPA DPWIN_00490 (re-released in February); you have to follow the installation order, otherwise you may get inconsistencies in your DCBF diretories. The problem will be solved with patch VEPA DPWIN_00494 expected to be available on February 24-th 2011.
UPDATE: patch DPWIN_00494 was released on March 3rd 2011.
Excerpt from patch description:
Patch warning – 11/02/16 – This Critical Warning has been issued by HP.
- DPWIN_00490 introduces behavior that will cause inconsistencies in the DCBF section of Data Protector’s Internal Database(IDB) if installing the VEPA general release patch DPWIN_00490 over the latest CORE, Cell Console and Cell Server patches DPWIN_00475, DPWIN_00477 and DPWIN_00476.
- To work around this behavior so the inconsistencies in the DCBF section of Data Protector’s Internal Database(IDB) be avoided when installing DPWIN_00490 the Data Protector patches should be installed in the below outlined order:
- Install the following CORE, CC and CS Patches:
- CORE Windows DPWIN_00455, HP-UX-PA PHSS_40811, HP-UX-IA PHSS_40812, SOLARIS DPSOL_00408, LINUX DPLNX_00114
- CS Windows DPWIN_00456, HP-UX-PA PHSS_40813, HP-UX-IA PHSS_40814, SOLARIS DPSOL_00409, LINUX DPLNX_00115
- CC Windows DPWIN_00457, HP-UX-PA PHSS_40815, HP-UX-IA PHSS_40816, SOLARIS DPSOL_00410, LINUX DPLNX_00116
- Install DPWIN_00490
- Install the following CORE CC and CS Patches:
- CORE Windows DPWIN_00475, HP-UX-PA PHSS_41363, HP-UX-IA PHSS_41364, SOLARIS DPSOL_00427, LINUX DPLNX_00133
- CC Windows DPWIN_00477, HP-UX-PA PHSS_41455, HP-UX-IA PHSS_41456, SOLARIS DPSOL_00429, LINUX DPLNX_00135
- CS Windows DPWIN_00476, HP-UX-PA PHSS_41453, HP-UX-IA PHSS_41454, SOLARIS DPSOL_00428, LINUX DPLNX_00134
- Install the following CORE, CC and CS Patches:
Security Bulletin c02699143
With document ID c02699143 on 2011/01/24 an advisory for HP Data Protector 6.11 was released, which describes a potential security problem when using Data Protector and in some circumstances a remote denial of service may possible.
There is a solution, usage of current patches – see article “current patches”. Only Windows operating systems are affected.
The complete advisory can be read here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02699143&dimid=1004694894&dicid=alr_jan11&jumpid=em_alerts/us/jan11/all/xbu/emailsubid/mrm/mcc/loc/rbu_category/alerts
Security Bulletin c02688353
With document ID c02688353 on 2011/01/18 an advisory for HP Data Protector 6.11 was released, which describes a potential security problem when using Data Protector.
There is a solution, usage of current patches – see article “current patches”.
The complete advisory can be read here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02688353&dimid=1004694894&dicid=alr_jan11&jumpid=em_alerts/us/jan11/all/xbu/emailsubid/mrm/mcc/loc/rbu_category/alerts
Advisory c02618631
With document ID c02618631 on 2010/11/19 an advisory for HP Data Protector 6.11 was released, which describes a problem when using the GUI after installing VEPA patch DPWIN_00483; the creation of bar backups is no longer possible, as browsing of instances is not possible.
There is a solution, copying back the saved GUI parts and installing the VEPA patch to dedicated clients only.
The complete advisory can be read here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02618631&dimid=1004694894&dicid=alr_nov10&jumpid=em_alerts/us/nov10/all/xbu/emailsubid/mrm/mcc/loc/rbu_category/alerts
UPDATE: DPWIN_490 solves the problem, please refer to “patches”.