Integer Overflow Vulnerability in HP OpenView Storage Data Protector

CVE-2007-2281

Summary

The vulnerability stems from an integer overflow in the _ncp32._NtrpTCPReceiveMsg function found in rds.exe within the Cell Manager Database Service of HP OpenView Storage Data Protector. This flaw allows remote attackers to exploit the size parameter by sending an excessively large value, potentially enabling them to execute arbitrary code on the affected system. If unpatched, this could lead to significant security breaches affecting the integrity and confidentiality of data managed by the service.

References