Back to CVE Browser

CVE-2007-2281

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0970%

EPSS Percentile3.72th

PublishedDec 18, 2009

Last ModifiedApr 23, 2026

Vulnerability Description

Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.

Affected Platforms (CPE)

📦

Hp

Openview Storage Data Protector

= 5.50

📦

Hp

Openview Storage Data Protector

= 6.0

References & Advisories

🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-09-15

🔗 http://marc.info/?l=bugtraq&m=126106261622540&w=2

🔗 http://securitytracker.com/id?1023361

🔗 http://www.securityfocus.com/bid/37386

🔗 http://www.vupen.com/english/advisories/2009/3594

🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-09-15

🔗 http://marc.info/?l=bugtraq&m=126106261622540&w=2

🔗 http://securitytracker.com/id?1023361

Related Vulnerabilities

CVE-2011-172910.0

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.1...

CVE-2011-172810.0

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.1...

CVE-2007-228010.0

Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component i...

CVE-2011-173010.0

Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.1...