HP OpenView Storage Data Protector CVE-2011-1865 Op Codes Remote Buffer Oveflow Vulnerability

Bugtraq ID:	48486
Class:	Unknown
CVE:	CVE-2011-1865
Remote:	Yes
Local:	No
Published:	Jun 28 2011 12:00AM
Updated:	Jul 04 2011 11:40AM
Credit:	Core Security Technologies
Vulnerable:	HP OpenView Storage Data Protector 6.20 HP OpenView Storage Data Protector 6.11 HP OpenView Storage Data Protector 6.10 HP OpenView Storage Data Protector 6.0
Not Vulnerable:

HP OpenView Storage Data Protector CVE-2011-1865 Op Codes Remote Buffer Oveflow Vulnerability

The HP OpenView Storage Data Protector is prone to a buffer-overflow vulnerability. This issue occurs because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application.

HP OpenView Storage Data Protector versions 6.0, 6.10, 6.11, and 6.20 are vulnerable.

HP OpenView Storage Data Protector CVE-2011-1865 Op Codes Remote Buffer Oveflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/48486.rb
• /data/vulnerabilities/exploits/48486.py

HP OpenView Storage Data Protector CVE-2011-1865 Op Codes Remote Buffer Oveflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

HP OpenView Storage Data Protector CVE-2011-1865 Op Codes Remote Buffer Oveflow Vulnerability

References:

• HP Homepage (HP)
  
• Multiple vulnerabilities in HP Data Protector (CoreLabs Research)