CVE-2011-1866 Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC...
HighCVSS 10.0
EPSS 20.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview storage data protector | = 6.00 | No fix listed |
| HP Inc openview storage data protector | = 6.10 | No fix listed |
| HP Inc openview storage data protector | = 6.11 | No fix listed |
| HP Inc openview storage data protector | = 6.20 | No fix listed |
References
- HPSBMU02686 vendor-advisory
- 45100 third-party-advisory vendor-advisory
- 8289 third-party-advisory
- 1025731 vdb-entry
- www.coresecurity.com exploit
- 17461 exploit
- 20110629 CORE-2011-0606: HP Data Protector EXEC_CMD Buffer Overflow Vulnerability mailing-list
- 48488 vdb-entry
- hp-openview-data-ce(68297) vdb-entry