CVE-2011-1729

HP OpenView Storage Data Protector Backup Client Service (OmniInet.exe) on Windows is vulnerable to a stack-based buffer overflow when processing GET_FILE messages, enabling remote code execution by unauthenticated attackers. Affected versions include Data Protector 6.00, 6.10, and 6.11. The issu...

CVE-2011-1736

CVE-2011-1736 affects HP OpenView Storage Data Protector (Backup Client Service) on Windows, specifically the OmniInet.exe component. The flaw is a directory-traversal vulnerability in the Backup Client Service (GET_FILE messages) that allows remote, unauthenticated attackers to read arbitrary fi...

CVE-2011-1734

HP OpenView Data Protector affected version 6.00/6.10/6.11 on Windows where the Backup Client Service (OmniInet.exe) processes malformed omniiaputil messages. The root cause is a stack-based buffer overflow in OmniInet.exe that allows unauthenticated, remote code execution, potentially with SYSTE...

CVE-2011-1733

HP OpenView Data Protector 6.00/6.10/6.11 Backup Client Service (OmniInet.exe) suffers a stack-based buffer overflow via malformed HPFGConfig messages, enabling remote code execution on Windows as SYSTEM. The flaw exists in the Backup Client Service (listening on port 5555) and results from insuf...

CVE-2011-1730

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECSCRIPT message...

CVE-2011-1728

HP Data Protector (OpenView Storage Data Protector) Backup Client Service OmniInet.exe on Windows (Data Protector versions 6.00, 6.10, 6.11) is affected by a stack-based buffer overflow triggered by malformed EXEC_BAR messages. This unauthenticated remote code execution flaw can allow an attacker...

CVE-2011-1736: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GETFILE message...

CVE-2011-1734: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed omniiaputil message...

CVE-2011-1731: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECINTEGUTIL message...

CVE-2011-1732: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed stutil message...

CVE-2011-1730: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECSCRIPT message...

CVE-2011-1729: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed GETFILE message...

CVE-2011-1735: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed bm message...

CVE-2011-1733: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed HPFGConfig message...

CVE-2011-1728: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to execute arbitrary code via a malformed EXECBAR message...

PT-2011-3334

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This occurs when processing a malformed omniiaputil...

PT-2011-3333

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This occurs when a malformed HPFGConfig message is...

PT-2011-3329

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This allows remote attackers to execute arbitrary code...

PT-2011-3332

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This occurs when processing a malformed stutil message,...

PT-2011-3335

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11 Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This allows remote attackers to execute arbitrary code ...