APP: Hewlett-Packard Application Recovery Manager OmniInet Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the HP Application Recovery Manager (OmniInet.exe). A successful attack can allow the execution of arbitrary code with SYSTEM privileges.

Extended Description

HP OpenView Data Protector Application Recovery Manager is prone to a remote stack-based buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Failed exploit attempts will result in a denial-of-service condition. OpenView Data Protector Application Recovery Manager 5.50 and 6.0 are vulnerable. NOTE: The vendor reports this as a denial-of-service vulnerability, but further information suggests that the issue can be exploited to execute arbitrary code.

Affected Products

Hp openview_data_protector_application_recovery_manager

References

BugTraq: 37250

CVE: CVE-2009-3844

URL: http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01943909 http://www.zerodayinitiative.com/advisories/zdi-09-091/

Short Name

APP:HPOV:OMNIINET-OF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: Hewlett-Packard Application Recovery Manager OmniInet Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?