CVE-2011-1736

2011-05-0719:55:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2011-1736

directory traversal

omniinet.exe

backup client service

hp openview

storage data protector

remote attack

file read

6.8 Medium

AI Score

Confidence

Low

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:C/I:N/A:P

0.051 Low

EPSS

Percentile

92.9%

JSON

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.

CPENameOperatorVersion
hp:openview_storage_data_protectorhp openview storage data protectoreq6.11
hp:openview_storage_data_protectorhp openview storage data protectoreq6.00
hp:openview_storage_data_protectorhp openview storage data protectoreq6.10

CPE	Name	Operator	Version
hp:openview_storage_data_protector	hp openview storage data protector	eq	6.11
hp:openview_storage_data_protector	hp openview storage data protector	eq	6.00
hp:openview_storage_data_protector	hp openview storage data protector	eq	6.10