CVE-2007-2281
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (8.82%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 8.82% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-189
- Affected
- hp/openview storage data protector
- Source
- cve@mitre.org
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-15
- http://marc.info/?l=bugtraq&m=126106261622540&w=2
- http://securitytracker.com/id?1023361Patch
- http://www.securityfocus.com/bid/37386
- http://www.vupen.com/english/advisories/2009/3594
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-15
- http://marc.info/?l=bugtraq&m=126106261622540&w=2
- http://securitytracker.com/id?1023361Patch
- http://www.securityfocus.com/bid/37386
- http://www.vupen.com/english/advisories/2009/3594
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.