PT-2011-2247 · Hewlett Packard · Hp Openview Storage Data Protector Cell Manager

Abdulaziz Hariri · Published 2011-01-20 · Updated 2017-08-17 · CVE-2011-0273

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector Cell Manager version 6.11

Description The issue is related to a buffer overflow in the crs.exe component, allowing remote attackers to execute arbitrary code via unspecified message types. This can potentially lead to remote code execution.

Recommendations For HP OpenView Storage Data Protector Cell Manager version 6.11, update to a version that fixes the buffer overflow issue in crs.exe to prevent remote code execution.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-0273

ZDI-11-024

Affected Products

Hp Openview Storage Data Protector Cell Manager

References · 9

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02688353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0273 · Security Note
• http://vupen.com/english/advisories/2011/0177 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-024 · Security Note
• http://secunia.com/advisories/42997 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-11-024 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64818 · Note
• http://osvdb.org/70621 · Note
• http://securitytracker.com/id?1024983 · Note