Check Point Advisories

Update Protection against HP OpenView Storage Data Protector Cell Manager Heap Buffer Overflow

Check Point Reference:	CPAI-2010-139
Date Published:	24 Jun 2010
Severity:	Critical
Last Updated:	Friday 01 January, 2010
Source:	Secunia Advisory SA37845
Industry Reference:	CVE-2007-2281
Protection Provided by:
Who is Vulnerable?	HP OpenView Data Protector Application Recovery Manager 5.5 HP OpenView Data Protector Application Recovery Manager 6.0
Vulnerability Description	A buffer overflow vulnerability exists in HP OpenView Data Protector Cell Manager, a backup solution designed for enterprise and distributed environments. The flaw is due to an integer overflow while processing crafted packets received on port 1530/TCP. A remote attacker can exploit this vulnerability by sending maliciously crafted packets to the affected service.
Update/Patch Avaliable	Vendor's advisory
Vulnerability Details	The vulnerability is due to an integer overflow that occurs while processing crafted requests. A remote unauthenticated attacker can exploit this vulnerability by sending a crafted request to a target server, potentially leading to execution of arbitrary code.