Unrated severityNVD Advisory· Published Dec 18, 2009· Updated Apr 23, 2026

CVE-2007-2280

Description

Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via an MSG_PROTOCOL command with long arguments, a different vulnerability than CVE-2009-3844.

Affected products

HP/Openview Storage Data Protector2 versions
cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securitytracker.com/idnvdPatch
www.zerodayinitiative.com/advisories/ZDI-09-099/nvdPatch
marc.infonvd
www.securityfocus.com/bid/37396nvd
www.vupen.com/english/advisories/2009/3594nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.057
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000