CVE-2011-1736 Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory....
HighCVSS 8.5
EPSS 9.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview storage data protector | = 6.00 | No fix listed |
| HP Inc openview storage data protector | = 6.10 | No fix listed |
| HP Inc openview storage data protector | = 6.11 | No fix listed |
References
- HPSBMA02668 vendor-advisory
- 72195 vdb-entry
- 44402 third-party-advisory
- 20110429 ZDI-11-152: HP Data Protector Backup Client Service GET_FILE Directory Traversal Vulnerability mailing-list
- 47638 vdb-entry
- 1025454 vdb-entry
- zerodayinitiative.com
- openview-data-code-exec(67209) vdb-entry