CVE-2007-2280

Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

60.29% chance of exploitation in the next 30 days, 99th percentile

Published

2009-12-18

Updated

2024-09-16

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_omniinet_1.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16455

References

• CVE Record
• NVD entry

Related

• CVE-2007-2274
• CVE-2007-2283
• CVE-2007-2273
• CVE-2007-2284
• CVE-2007-2272
• CVE-2007-2285