Unscored severity · published Jul 1, 2011
CVE-2011-1866
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted…
–
CVSS
20.9%
EPSS
No
On KEV
Description
Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXEC_CMD functionality.
Exploitation
Is it being used?
Exploit prediction (EPSS)20.9% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Openview Storage Data Protector · HP
6.00; 6.10; 6.11; 6.20 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1866
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1866
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182
Vendor Advisory
http://secunia.com/advisories/45100
securityreason.com
http://securityreason.com/securityalert/8289
securitytracker.com
http://securitytracker.com/id?1025731
Exploit
http://www.coresecurity.com/content/HP-Data-Protector-EXECCMD-Vulnerability
www.exploit-db.com
http://www.exploit-db.com/exploits/17461
More from Openview Storage Data Protector
–
CVE-2011-1865
Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request…
–
CVE-2011-1515
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (daemon exit) via a request containing crafted…
–
CVE-2011-1514
The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a…
–
CVE-2011-1864
Unspecified vulnerability in HP OpenView Storage Data Protector 6.0, 6.10, and 6.11 allows remote attackers to execute arbitrary code via unknown vectors
–
CVE-2011-1736
Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary…