First published: Fri Dec 18 2009(Updated: )
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
HP OpenView Storage Data Protector Cell Manager | =5.50 | |
HP OpenView Storage Data Protector Cell Manager | =6.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-2280 has a severity rating that indicates a high potential for remote code execution.
CVE-2007-2280 allows remote attackers to execute arbitrary code by sending a specifically crafted MSG_PROTOCOL command with long arguments to the affected service.
CVE-2007-2280 affects HP OpenView Storage Data Protector versions 5.50 and 6.0.
To protect against CVE-2007-2280, it is recommended to apply patches or updates provided by HP for affected versions.
Exploitation of CVE-2007-2280 may manifest as unexpected service crashes or unusual system behavior due to remote code execution.