PT-2011-3427 · Hewlett Packard · Hp Openview Storage Data Protector

Publicado 2011-07-01 · Atualizado 2018-10-09 · CVE-2011-1866

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20

Description The issue is related to a buffer overflow in the omniinet.exe component of the inet service, which allows remote attackers to execute arbitrary code through a crafted request. This is specifically tied to the EXEC CMD functionality.

Recommendations For HP OpenView Storage Data Protector versions 6.00 through 6.20, consider disabling the EXEC CMD functionality in the omniinet.exe component as a temporary workaround until a patch is available. Restrict access to the inet service to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1866

Produtos afetados

Hp Openview Storage Data Protector

Referências · 11

• 🔥 http://exploit-db.com/exploits/17461 · Exploit
• 🔥 https://exploit-db.com/exploits/17461 · Exploit
• 🔥 http://coresecurity.com/content/HP-Data-Protector-EXECCMD-Vulnerability · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68297 · Nota
• http://securitytracker.com/id?1025731 · Nota
• http://securityreason.com/securityalert/8289 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1866 · Nota de Segurança
• http://securityfocus.com/bid/48488 · Nota
• http://secunia.com/advisories/45100 · Aviso do Fabricante
• http://securityfocus.com/archive/1/518666/100/0/threaded · Nota
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02872182 · Aviso do Fabricante