What is CVE-2011-1865?

CVE-2011-1865 is a vulnerability in Hp Openview_storage_data_protector, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-07-01.

Is CVE-2011-1865 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Hp Openview_storage_data_protector

CVE-2011-1865

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.

Vulnerability class: Buffer Overflow

EPSS: 0.892 (99.6th percentile) — read the EPSS interpretation.

Affected products

Hp Openview_storage_data_protector — versions 6.00, 6.10, 6.11
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

1025731 (vdb-entry, x_refsource_SECTRACK)
17467 (exploit, x_refsource_EXPLOIT-DB)
48486 (vdb-entry, x_refsource_BID)
8291 (x_refsource_SREASON, third-party-advisory)
17468 (exploit, x_refsource_EXPLOIT-DB)
8288 (x_refsource_SREASON, third-party-advisory)
openview-data-ce(68281) (vdb-entry, x_refsource_XF)
17490 (exploit, x_refsource_EXPLOIT-DB)
17458 (exploit, x_refsource_EXPLOIT-DB)
HPSBMU02686 (Vendor Advisory, x_refsource_HP, vendor-advisory)

Frequently asked questions

What is CVE-2011-1865?: CVE-2011-1865 is a vulnerability in Hp Openview_storage_data_protector, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2011-07-01.
Is CVE-2011-1865 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.