CVE-2007-2281 Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and....
HighCVSS 10.0
EPSS 8.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview storage data protector | = 5.50 | No fix listed |
| HP Inc openview storage data protector | = 6.0 | No fix listed |
References
- dvlabs.tippingpoint.com
- HPSBMA02252 vendor-advisory
- 1023361 patch vdb-entry
- 37386 vdb-entry
- ADV-2009-3594 vdb-entry