{"id":"CVE-2010-3007","aliases":["EUVD-2010-3009","GHSA-89jp-7f7p-29p6"],"status":"published","title":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server...","description":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.05518,"percentile":0.92861,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2010-09-09T21:00:00Z","modified":"2026-06-16T23:21:57Z","exploits":[{"source":"exploitdb","id":"EDB-23290","title":"HP Data Protector - DtbClsLogin Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2012-12-11","verified":true,"url":"https://www.exploit-db.com/exploits/23290"},{"source":"metasploit","id":"exploit/windows/misc/hp_dataprotector_dtbclslogin","title":"HP Data Protector DtbClsLogin Buffer Overflow","type":"exploit","platform":"Windows","date":"2010-09-09","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/hp_dataprotector_dtbclslogin"}],"products":[{"vendor":"hp","product":"data_protector_express"}],"references":[{"url":"http://www13.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02498535","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3007"},{"url":"https://github.com/advisories/GHSA-89jp-7f7p-29p6"}],"sources":{"cve":[{"id":"CVE-2010-3007","description":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.","status":"published","published":"2010-09-09T21:00:00Z","modified":"2024-09-17T01:35:30.704Z","updated_at":"2026-11-02T14:33:28.115387Z"}],"euvd":[{"id":"EUVD-2010-3009","description":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.","status":"published","published":"2010-09-09T21:00:00Z","modified":"2024-09-17T01:35:30Z","updated_at":"2026-11-03T00:28:48.402396Z"}],"ghsa":[{"id":"GHSA-89jp-7f7p-29p6","title":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server...","description":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.","status":"published","published":"2022-05-13T01:39:34Z","modified":"2023-02-02T05:00:29Z","updated_at":"2026-11-02T14:50:58.133799Z"}],"nvd":[{"id":"CVE-2010-3007","description":"Unspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.","status":"published","published":"2010-09-09T22:00:02.437Z","modified":"2026-06-16T23:21:57.46Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:52.227027Z"}]}}