CVEvulnerability
CVE-2007-2281
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-12-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.
Affected configurations
• hp openview storage data protector 5.50
• hp openview storage data protector 6.0
Related
Weakness · not in database (1)
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-15 dvlabs.tippingpoint.com
- http://marc.info/?l=bugtraq&m=126106261622540&w=2 marc.info
- http://securitytracker.com/id?1023361 Patch
- http://www.securityfocus.com/bid/37386 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3594 www.vupen.com
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-15 dvlabs.tippingpoint.com
- http://marc.info/?l=bugtraq&m=126106261622540&w=2 marc.info
- http://securitytracker.com/id?1023361 Patch
- http://www.securityfocus.com/bid/37386 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3594 www.vupen.com