HP OpenView Storage Data Protector Cell Manager buffer overflow

Added: 01/29/2010 Background HP Data Protector is an automated data backup solution. Problem A buffer overflow vulnerability in HP OpenView Storage Data Protector allows remote attackers to execute arbitrary commands by sending a specially crafted request to the Cell Manager service. Resolution...

HP OpenView Storage Data Protector rds.exe服务堆溢出漏洞

BUGTRAQ ID: 37386 CVECAN ID: CVE-2007-2281 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 1530端口上的Cell Manager Database服务（rds.exe）中存在堆溢出漏洞。该服务通过ncp32.NtrpTCPReceiveMsg接收以下格式的套接字数据： 0xB6298C234-byte size....data...

CVE-2007-2281

Integer overflow in the ncp32.NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter...

CVE-2007-2281: Undefined Security Weakness

Integer overflow in the ncp32.NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter...

CVE-2006-4201: Undefined Security Weakness

Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation...