CVE-2009-3844
HP OpenView Data Protector 5.50/6.0 - Remote Code Execution via MSG_PROTOCOL Packet
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2009-3844.
PoCs published by Metasploit, EgiX, including Metasploit module exploits/windows/misc/hp_omniinet_2.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing arbitrary code execution with elevated privileges. It includes automatic target detection and supports multiple versions of HP OpenView Data Protector and Application Recovery Manager.
Description
Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing arbitrary code execution with elevated privileges. It includes automatic target detection and supports multiple versions of HP OpenView Data Protector and Application Recovery Manager.
This exploit targets a stack-based buffer overflow in HP Application Recovery Manager's OmniInet.exe via a crafted MSG_PROTOCOL packet. It leverages SEH overwrites and a jump-back technique to execute arbitrary shellcode.
This Metasploit module exploits a stack-based buffer overflow in HP OmniInet.exe via a crafted MSG_PROTOCOL packet, allowing remote code execution with elevated privileges. It includes multiple targets for different versions of HP OpenView Data Protector and Application Recovery Manager.