CVE-2011-1866

HP OpenView Storage Data Protector <6.20 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2011-1866. PoCs published by Core Security.

AI-analyzed exploit summary This Python script exploits a remote stack overflow vulnerability in HP Data Protector by sending a maliciously crafted packet to port 5555, causing a buffer overflow in the 'omniinet.exe' process. The PoC demonstrates control over EIP and SEH, leading to potential arbitrary code execution.

Description

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Core Security · textdoswindows
https://www.exploit-db.com/exploits/17461

This Python script exploits a remote stack overflow vulnerability in HP Data Protector by sending a maliciously crafted packet to port 5555, causing a buffer overflow in the 'omniinet.exe' process. The PoC demonstrates control over EIP and SEH, leading to potential arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP OpenView Storage Data Protector v6.00-v6.20 (Windows)
No auth needed
Prerequisites: Network access to port 5555 on the target system
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68297
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025731
Exploit, Third Party Advisory exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/17461
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8289
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45100
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48488
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/518666/100/0/threaded

Scores

EPSS 0.2089
EPSS Percentile 97.2%

Details

CWE
CWE-119
Status published
Products (4)
hp/openview_storage_data_protector 6.00
hp/openview_storage_data_protector 6.10
hp/openview_storage_data_protector 6.11
hp/openview_storage_data_protector 6.20
Published Jul 01, 2011
Tracked Since Feb 18, 2026