CVE-2011-1733

HP OpenView Data Protector 6.00/6.10/6.11 Backup Client Service (OmniInet.exe) suffers a stack-based buffer overflow via malformed HPFGConfig messages, enabling remote code execution on Windows as SYSTEM. The flaw exists in the Backup Client Service (listening on port 5555) and results from insuf...

ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability

ZDI-11-149: HP Data Protector Backup Client Service HPFGConfig Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-149 April 29, 2011 -- CVE ID: CVE-2011-1733 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products:...