Directory Traversal Vulnerability in HP OpenView Storage Data Protector

CVE-2011-1736

Summary

A directory traversal vulnerability exists in OmniInet.exe within the Backup Client Service of HP OpenView Storage Data Protector. This flaw enables remote attackers to exploit directory traversal sequences in a filename sent via a GET_FILE message. As a result, unauthorized access to sensitive files on the server can occur, potentially leading to exposure of critical information. Users are urged to apply necessary updates and implement security measures to mitigate the risks associated with this vulnerability.

References