CVEvulnerability
CVE-2011-1736
8.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.
Affected configurations
• hp openview storage data protector 6.00
• hp openview storage data protector 6.10
• hp openview storage data protector 6.11
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 Vendor Advisory
- http://osvdb.org/72195 osvdb.org
- http://secunia.com/advisories/44402 secunia.com
- http://www.securityfocus.com/archive/1/517772/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47638 www.securityfocus.com
- http://www.securitytracker.com/id?1025454 www.securitytracker.com
- http://zerodayinitiative.com/advisories/ZDI-11-152/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67209 exchange.xforce.ibmcloud.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240 Vendor Advisory
- http://osvdb.org/72195 osvdb.org
- http://secunia.com/advisories/44402 secunia.com
- http://www.securityfocus.com/archive/1/517772/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/47638 www.securityfocus.com
- http://www.securitytracker.com/id?1025454 www.securitytracker.com
- http://zerodayinitiative.com/advisories/ZDI-11-152/ zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67209 exchange.xforce.ibmcloud.com