CVEvulnerability
CVE-2007-2280
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Affected configurations
• hp openview storage data protector 5.50
• hp openview storage data protector 6.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=bugtraq&m=126106261622540&w=2 marc.info
- http://securitytracker.com/id?1023361 Patch
- http://www.securityfocus.com/bid/37396 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3594 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-099/ Patch
- http://marc.info/?l=bugtraq&m=126106261622540&w=2 marc.info
- http://securitytracker.com/id?1023361 Patch
- http://www.securityfocus.com/bid/37396 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3594 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-09-099/ Patch