Buffer Overflow Vulnerability in HP OpenView Storage Data Protector
CVE-2011-1866

Currently unrated

Key Information:

Vendor

HP
Status
Openview Storage Data Protector
Vendor
CVE Published:
1 July 2011

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 56%

What is CVE-2011-1866?

A buffer overflow flaw exists in the omniinet.exe component of the inet service within HP OpenView Storage Data Protector versions 6.00 to 6.20. This vulnerability enables remote attackers to exploit the EXEC_CMD functionality, allowing them to execute arbitrary code on affected systems through specially crafted requests. This security risk emphasizes the necessity for prompt updates and rigorous security practices to safeguard sensitive data.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2011-1866 - Proof of Concept

References

http://securitytracker.com/id?1025731
vdb-entryx_refsource_SECTRACK
http://www.exploit-db.com/exploits/17461
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/68297
vdb-entryx_refsource_XF

EPSS Score

56% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.