CVE-2011-1736: Path Traversal
First published: Sat May 07 2011(Updated: )
Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Storage Data Protector Cell Manager | =6.11 | |
| HP OpenView Storage Data Protector Cell Manager | =6.00 | |
| HP OpenView Storage Data Protector Cell Manager | =6.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://zerodayinitiative.com/advisories/ZDI-11-152/
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240
- http://osvdb.org/72195
- http://www.securityfocus.com/bid/47638
- http://secunia.com/advisories/44402
- http://www.securitytracker.com/id?1025454
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67209
- http://www.securityfocus.com/archive/1/517772/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2011-1736?
CVE-2011-1736 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive files.
How do I fix CVE-2011-1736?
To mitigate CVE-2011-1736, update to a patched version of HP OpenView Storage Data Protector that addresses the directory traversal vulnerability.
What affected versions are impacted by CVE-2011-1736?
Affected versions of HP OpenView Storage Data Protector include 6.00, 6.10, and 6.11.
Who can be impacted by CVE-2011-1736?
Remote attackers with knowledge of this vulnerability can exploit CVE-2011-1736 to read arbitrary files on systems running the affected versions.
Can CVE-2011-1736 lead to data breaches?
Yes, if exploited, CVE-2011-1736 can lead to unauthorized access to sensitive information, potentially resulting in data breaches.
- agent/type
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview storage data protector cell manager
- version/hp openview storage data protector cell manager/6.11
- version/hp openview storage data protector cell manager/6.00
- version/hp openview storage data protector cell manager/6.10