CVE-2007-2280

Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.

Link	Resource
http://www.securityfocus.com/bid/37396
http://www.zerodayinitiative.com/advisories/ZDI-09-099/	Patch
http://securitytracker.com/id?1023361	Patch
http://marc.info/?l=bugtraq&m=126106261622540&w=2
http://www.vupen.com/english/advisories/2009/3594

Configuration 1

cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:* cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*

---

Published : 2009-12-18 07:30

Updated : 2009-12-23 06:26

---

NVD link : CVE-2007-2280

Mitre link : CVE-2007-2280

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer