CVE-2011-1732

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11

Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This occurs when processing a malformed stutil message, allowing remote attackers to execute arbitrary code.

Recommendations For HP OpenView Storage Data Protector versions 6.00 through 6.11, consider disabling the OmniInet.exe component until a patch is available to prevent remote code execution via malformed stutil messages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.