Unscored severity · published Dec 18, 2009
CVE-2007-2280
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0…
–
CVSS
60.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Exploitation
Is it being used?
Exploit prediction (EPSS)60.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Openview Storage Data Protector · HP
5.50; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2280
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2280
marc.info
http://marc.info/?l=bugtraq&m=126106261622540&w=2
Patch
http://securitytracker.com/id?1023361
www.securityfocus.com
http://www.securityfocus.com/bid/37396
www.vupen.com
http://www.vupen.com/english/advisories/2009/3594
Patch
http://www.zerodayinitiative.com/advisories/ZDI-09-099/
More from Openview Storage Data Protector
–
CVE-2011-1866
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted…
–
CVE-2011-1865
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request…
–
CVE-2011-1515
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted…
–
CVE-2011-1514
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…
–
CVE-2011-1864
Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to execute arbitrary code via unknown vectors