HP OpenView Storage Data Protector Stack Buffer Overflow
Publish Date: 21 lipca 2015
Severity: : Critical
CVE Kennungen: : CVE-2007-2280
Advisory Date: 21 lipca 2015
DESCRIPTION
Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1003958
Trend Micro Deep Security DPI Rule Name: 1003899 - HP OpenView Data Protector Application Recovery Manager Buffer Overflow
AFFECTED SOFTWARE AND VERSION:
- hp openview_storage_data_protector 5.50
- hp openview_storage_data_protector 6.0