HP OpenView Storage Data Protector EXEC_CMD Buffer Overflow (CVE-2011-1866)

A remote code execution vulnerability has been reported in HP OpenView Storage Data Protector. The vulnerability is due to insufficient boundary checking while handling EXECCMD messages. A remote attacker may exploit this vulnerability by sending a specially crafted EXECCMD to an affected service...

[security bulletin] HPSBMU02686 SSRT100541 rev.3 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02872182 Version: 3 HPSBMU02686 SSRT100541 rev.3 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as...

HP OpenView Storage Data Protector multiple security vulnerabilities

Multiple vulnerabilities in TCP/5555 service...

CVE-2011-1866

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-1515

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

Stack overflow

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...

Design/Logic Flaw

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

CVE-2011-1514

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request containing crafted parameters...

CVE-2011-1866

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-1515

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

CVE-2011-1866

HP OpenView Storage Data Protector 6.00–6.20 contains a remote code execution vulnerability in the inet service due to a buffer/boundary handling issue with EXEC_CMD messages. The root cause is insufficient boundary checking when processing EXEC_CMD, enabling an attacker to craft a request that e...

CVE-2011-1865

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...

PT-2011-3182

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20 Description The issue allows remote attackers to cause a denial of service, resulting in the daemon exiting, by sending a request with crafted parameters to the inet service...

PT-2011-3426

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20 Description The issue is related to multiple stack-based buffer overflows in the inet service. This allows remote attackers to execute arbitrary code via a request containing crafte...

CVE-2011-1515: Undefined Security Weakness

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service daemon exit via a request containing crafted parameters...

PT-2011-3427

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20 Description The issue is related to a buffer overflow in the omniinet.exe component of the inet service, which allows remote attackers to execute arbitrary code through a crafted...

PT-2011-3181

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.20 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash, via a request containing crafted parameters...

CVE-2011-1865: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters...

CVE-2011-1866: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in omniinet.exe in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to execute arbitrary code via a crafted request, related to the EXECCMD functionality...

CVE-2011-1514: Undefined Security Weakness

The inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a request containing crafted parameters...