CVE-2007-2280
HP OpenView Storage Data Protector 5.50 and 6.0 - Remote Code Execution via MSG_PROTOCOL Command
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-2280.
PoCs published by Metasploit, including Metasploit module exploits/windows/misc/hp_omniinet_1.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing remote code execution with elevated privileges. It includes automatic target detection and SEH-based exploitation.
Description
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing remote code execution with elevated privileges. It includes automatic target detection and SEH-based exploitation.
This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing remote code execution with elevated privileges. It includes multiple targets for different versions of HP OpenView Data Protector and Application Recovery Manager.