{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-10-03T16:14:37", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"}, {"name": "HPSBMA02252", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}, {"name": "SSRT061258", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}, {"name": "1023361", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1023361"}, {"name": "ADV-2009-3594", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2009/3594"}, {"name": "37386", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/37386"}, {"name": "SSRT061259", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2281", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://dvlabs.tippingpoint.com/advisory/TPTI-09-15", "refsource": "MISC", "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"}, {"name": "HPSBMA02252", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}, {"name": "SSRT061258", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}, {"name": "1023361", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1023361"}, {"name": "ADV-2009-3594", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2009/3594"}, {"name": "37386", "refsource": "BID", "url": "http://www.securityfocus.com/bid/37386"}, {"name": "SSRT061259", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2281", "datePublished": "2022-10-03T16:14:37", "dateReserved": "2022-10-03T00:00:00", "dateUpdated": "2022-10-03T16:14:37", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:openview_storage_data_protector:5.50:*:*:*:*:*:*:*", "matchCriteriaId": "C114C6E6-0995-4449-BEBA-3247B88D8CFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_storage_data_protector:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "2924E972-C490-4359-8E85-C5A4BDE088C4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Integer overflow in the _ncp32._NtrpTCPReceiveMsg function in rds.exe in the Cell Manager Database Service in the Application Recovery Manager component in HP OpenView Storage Data Protector 5.50 and 6.0 allows remote attackers to execute arbitrary code via a large value in the size parameter."}, {"lang": "es", "value": "Desbordamiento de entero en la funci\u00f3n _ncp32._NtrpTCPReceiveMsg en rds.exe en servicio de base de datos del gestor de celdas del componente de gesti\u00f3n de recuperaci\u00f3n de aplicaciones en HP OpenView Storage Data Protector v5.50 y v6.0 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de un valor demasiado grande en el par\u00e1metro 'size'."}], "id": "CVE-2007-2281", "lastModified": "2009-12-23T06:26:09.767", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2009-12-18T19:30:00.233", "references": [{"source": "cve@mitre.org", "url": "http://dvlabs.tippingpoint.com/advisory/TPTI-09-15"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=126106261622540&w=2"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://securitytracker.com/id?1023361"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/37386"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2009/3594"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-189"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}