CVE-2007-2280

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
71.0%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: December 18, 2009 (5991 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.

CWE

CWE-119

Affected Products

hp openview storage data protector

References

🔗 marc.info 🔗 securitytracker.com 🔗 www.securityfocus.com 🔗 www.vupen.com 🔗 www.zerodayinitiative.com