CVE-2011-1729

Name of the Vulnerable Software and Affected Versions HP OpenView Storage Data Protector versions 6.00 through 6.11

Description The issue is related to a stack-based buffer overflow in the OmniInet.exe component of the Backup Client Service. This allows remote attackers to execute arbitrary code via a malformed GET FILE message.

Recommendations For HP OpenView Storage Data Protector versions 6.00 through 6.11, consider restricting access to the Backup Client Service until a patch is available. As a temporary workaround, avoid using the GET FILE message in the affected service to minimize the risk of exploitation.