HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

Bugtraq ID:	37396
Class:	Boundary Condition Error
CVE:	CVE-2007-2280
Remote:	Yes
Local:	No
Published:	Dec 17 2009 12:00AM
Updated:	Jan 07 2010 05:52AM
Credit:	Tenable Network Security and Aaron Portnoy of TippingPoint DVLabs
Vulnerable:	HP OpenView Storage Data Protector 5.5 HP OpenView Storage Data Protector 6.0 HP OpenView Storage Data Protector 5.1
Not Vulnerable:

HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

HP OpenView Storage Data Protector is prone to a stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition.

NOTE: This issue was previously covered in BID 37386 (HP OpenView Storage Data Protector Multiple Remote Code Execution Vulnerabilities), but has been assigned its own record to better document it.

HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/37396.rb

HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

References:

• Micro News Homepage (phptoys)
  
• ZDI-09-099: Hewlett-Packard OpenView Data Protector Backup Client Service Buffer (Zero Day Initiative)