critical10.0Public exploit code
CVE-2007-2280
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Pr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP - 'OmniInet.exe' MSG_PROTOCOL Buffer Overflow (Metasploit) (2)2010-09-20 · remote · windows · Verified
Impact
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Openview Storage Data Protector | Versions 5.50, 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=126106261622540&w=2
- http://securitytracker.com/id?1023361
- http://www.securityfocus.com/bid/37396
- http://www.vupen.com/english/advisories/2009/3594
- http://www.zerodayinitiative.com/advisories/ZDI-09-099/
- http://marc.info/?l=bugtraq&m=126106261622540&w=2
- http://securitytracker.com/id?1023361
- http://www.securityfocus.com/bid/37396
- http://www.vupen.com/english/advisories/2009/3594
- http://www.zerodayinitiative.com/advisories/ZDI-09-099/