Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2011-1865

CWE-119Buffer Overflow7 documents4 sources
Severity
10.0CRITICAL
EPSS
89.2%
top 0.47%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedJul 1
Latest updateMay 17

Description

Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to execute arbitrary code via a request containing crafted parameters.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-22hh-v2f4-4vpg: Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 62022-05-17
CVEList
CVE-2011-1865: Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 62011-07-01

💥Exploits & PoCs

4
Exploit-DB
HP OmniInet.exe Opcode 20 - Remote Buffer Overflow (Metasploit)2011-07-04
Exploit-DB
HP Data Protector 6.11 - Remote Buffer Overflow (DEP Bypass)2011-07-02
Exploit-DB
HP - 'OmniInet.exe' Opcode 27 Buffer Overflow (Metasploit)2011-07-01
Exploit-DB
HP Data Protector 6.20 - Multiple Vulnerabilities2011-06-29
CVE-2011-1865 (CRITICAL CVSS 10) | Multiple stack-based buffer overflo | cvebase.io