CVE-2007-2281

Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://dvlabs.tippingpoint.com/advisory/TPTI-09-15
http://marc.info/?l=bugtraq&m=126106261622540&w=2
http://securitytracker.com/id?1023361	Patch
http://www.securityfocus.com/bid/37386
http://www.vupen.com/english/advisories/2009/3594

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hp:openview_storage_data_protector:5.50:::::::*
	cpe:2.3:a:hp:openview_storage_data_protector:6.0:::::::*

History

No history.

Information

Published : 2009-12-18 19:30

Updated : 2009-12-23 06:26

NVD link : CVE-2007-2281

Mitre link : CVE-2007-2281

CVE.ORG link : CVE-2007-2281

JSON object : View

Products Affected

hp

openview_storage_data_protector

CWE

CWE-189

Numeric Errors

{"id": "CVE-2007-2281", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-12-18T19:30:00.233", "references": [{"url": "http://dvlabs.tippingpoint.com/advisory/TPTI-09-15", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1023361", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/37386", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2009/3594", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-189"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}, {"lang": "es", "value": "Desbordamiento de entero en la funci\u00f3n _ncp32._NtrpTCPReceiveMsg en rds.exe en servicio de base de datos del gestor de celdas del componente de gesti\u00f3n de recuperaci\u00f3n de aplicaciones en HP OpenView Storage Data Protector v5.50 y v6.0 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un valor demasiado grande en el par\u00e1metro 'size'."}], "lastModified": "2009-12-23T06:26:09.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C114C6E6-0995-4449-BEBA-3247B88D8CFC"}, {"criteria": "cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2924E972-C490-4359-8E85-C5A4BDE088C4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}