{"api_version":"1","generated_at":"2026-07-23T08:31:23+00:00","cve":"CVE-2007-2281","urls":{"html":"https://cve.report/CVE-2007-2281","api":"https://cve.report/api/cve/CVE-2007-2281.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-2281","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-2281"},"summary":{"title":"CVE-2007-2281","description":"Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-12-18 19:30:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-189","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","name":"http://marc.info/?l=bugtraq&m=126106261622540&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[security bulletin] HPSBMA02252 SSRT061258, SSRT061259 rev.1 - HP OpenView Storage Data Protector, R' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2009/3594","name":"http://www.vupen.com/english/advisories/2009/3594","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securitytracker.com/id?1023361","name":"http://securitytracker.com/id?1023361","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"SecurityTracker.com Archives - HP OpenView Storage Data Protector Flaws Let Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/37386","name":"http://www.securityfocus.com/bid/37386","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP OpenView Storage Data Protector Cell Manager Database Service Integer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15","name":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TippingPoint | DVLabs |","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-2281","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-2281","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"2281","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"openview_storage_data_protector","cpe6":"5.50","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"2281","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"openview_storage_data_protector","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T13:33:28.251Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"},{"name":"HPSBMA02252","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"SSRT061258","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"1023361","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1023361"},{"name":"ADV-2009-3594","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/3594"},{"name":"37386","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/37386"},{"name":"SSRT061259","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2009-12-18T19:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"},{"name":"HPSBMA02252","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"SSRT061258","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"1023361","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1023361"},{"name":"ADV-2009-3594","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/3594"},{"name":"37386","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/37386"},{"name":"SSRT061259","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-2281","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15","refsource":"MISC","url":"http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"},{"name":"HPSBMA02252","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"SSRT061258","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"},{"name":"1023361","refsource":"SECTRACK","url":"http://securitytracker.com/id?1023361"},{"name":"ADV-2009-3594","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/3594"},{"name":"37386","refsource":"BID","url":"http://www.securityfocus.com/bid/37386"},{"name":"SSRT061259","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=126106261622540&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-2281","datePublished":"2009-12-18T19:00:00.000Z","dateReserved":"2007-04-26T00:00:00.000Z","dateUpdated":"2024-09-17T03:53:05.841Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-12-18 19:30:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-189","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*","matchCriteriaId":"C114C6E6-0995-4449-BEBA-3247B88D8CFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*","matchCriteriaId":"2924E972-C490-4359-8E85-C5A4BDE088C4"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"2281","Ordinal":"1","Title":"CVE-2007-2281","CVE":"CVE-2007-2281","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"2281","Ordinal":"1","NoteData":"Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.","Type":"Description","Title":"CVE-2007-2281"},{"CveYear":"2007","CveId":"2281","Ordinal":"2","NoteData":"2009-12-18","Type":"Other","Title":"Published"}]}}}