CVE-2007-2280: Buffer Overflow
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSGPROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2280?
CVE-2007-2280 has a severity rating that indicates a high potential for remote code execution.
How does CVE-2007-2280 affect HP OpenView Storage Data Protector?
CVE-2007-2280 allows remote attackers to execute arbitrary code by sending a specifically crafted MSG_PROTOCOL command with long arguments to the affected service.
What versions of HP OpenView Storage Data Protector are impacted by CVE-2007-2280?
CVE-2007-2280 affects HP OpenView Storage Data Protector versions 5.50 and 6.0.
How can I protect against CVE-2007-2280?
To protect against CVE-2007-2280, it is recommended to apply patches or updates provided by HP for affected versions.
What are the symptoms of exploitation of CVE-2007-2280?
Exploitation of CVE-2007-2280 may manifest as unexpected service crashes or unusual system behavior due to remote code execution.