Unscored severity · published Dec 18, 2009
CVE-2007-2281
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage…
–
CVSS
8.8%
EPSS
No
On KEV
Description
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Openview Storage Data Protector · HP
5.50; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2281
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2281
dvlabs.tippingpoint.com
http://dvlabs.tippingpoint.com/advisory/TPTI-09-15
marc.info
http://marc.info/?l=bugtraq&m=126106261622540&w=2
Patch
http://securitytracker.com/id?1023361
www.securityfocus.com
http://www.securityfocus.com/bid/37386
www.vupen.com
http://www.vupen.com/english/advisories/2009/3594
More from Openview Storage Data Protector
–
CVE-2011-1866
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted…
–
CVE-2011-1865
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request…
–
CVE-2011-1515
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted…
–
CVE-2011-1514
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…
–
CVE-2011-1864
Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to execute arbitrary code via unknown vectors