HP OpenView Storage Data Protector 'omniinet.exe' Remote Buffer Overflow Vulnerability
11 Jul. 2011
Summary
HP OpenView Storage Data Protector is prone to a stack-based buffer-overflow vulnerability because it fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.
Credit:
The original article can be found at: http://www.securityfocus.com/bid/48488
.The information has been provided by Nahuel C. Riva of Core Security Technologies..
Vulnerable Systems:
*HP OpenView Storage Data Protector 6.20and prior
An attacker can exploit this issue by sending specially crafted packets to TCP port 5555.
Successful exploits will allow attackers to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.
HP OpenView Storage Data Protector versions 6.0, 6.10, 6.11 and 6.20 are vulnerable
.
Vendor Status:
Vendor as issued an updated vulnerability.
