Buffer Overflow Vulnerability in HP OpenView Storage Data Protector
CVE-2011-1866

Currently unrated

Key Information:

Vendor
HP
Status
Openview Storage Data Protector
Vendor
CVE Published:
1 July 2011

Summary

A buffer overflow flaw exists in the omniinet.exe component of the inet service within HP OpenView Storage Data Protector versions 6.00 to 6.20. This vulnerability enables remote attackers to exploit the EXEC_CMD functionality, allowing them to execute arbitrary code on affected systems through specially crafted requests. This security risk emphasizes the necessity for prompt updates and rigorous security practices to safeguard sensitive data.

References

http://securitytracker.com/id?1025731
vdb-entryx_refsource_SECTRACK
http://www.exploit-db.com/exploits/17461
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/68297
vdb-entryx_refsource_XF

EPSS Score

75% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.