CVE-2011-1736

Description

Directory traversal vulnerability in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 allows remote attackers to read arbitrary files via directory traversal sequences in a filename in a GET_FILE message.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/67209

http://zerodayinitiative.com/advisories/ZDI-11-152/

http://www.securitytracker.com/id?1025454

http://www.securityfocus.com/bid/47638

http://www.securityfocus.com/archive/1/517772/100/0/threaded

http://secunia.com/advisories/44402

http://osvdb.org/72195

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02810240

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3