Check Point Advisories

HP OpenView Storage Data Protector Opcode 27 Stack Buffer Overflow

Check Point Reference:	CPAI-2012-063
Date Published:	13 Feb 2012
Severity:	Critical
Last Updated:	Sunday 01 January, 2012
Source:	CVE-2011-1865
Protection Provided by:
Who is Vulnerable?	HP OpenView Storage Data Protector 6.0 HP OpenView Storage Data Protector 6.10 HP OpenView Storage Data Protector 6.11 HP OpenView Storage Data Protector 6.20
Vulnerability Description	A remote code execution vulnerability has been reported in HP OpenView.
Vulnerability Details	The vulnerability is due to insufficient boundary checking while handling certain opcode requests. A remote attacker may exploit this vulnerability by sending a specially crafted opcode request to a target server. Successful exploitation would allow an attacker to execute code in the target system, in the security context of the logged-on user. Unsuccessful code execution may result in a denial of service condition.