Description
Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GET_FILE message.
References (8)
Core 8
Core References
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-11-145/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67202
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/47638
Vendor Advisory vendor-advisory
x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/44402
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1025454
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/72188
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/517765/100/0/threaded
Scores
EPSS
0.4946
EPSS Percentile
97.8%
Details
CWE
CWE-119
Status
published
Products (3)
hp/openview_storage_data_protector
6.00
hp/openview_storage_data_protector
6.10
hp/openview_storage_data_protector
6.11
Published
May 07, 2011
Tracked Since
Feb 18, 2026