HP OpenView Storage Data Protector Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Storage Data Protector, which could be exploited by remote attackers to gain knowledge of sensitive information or compromise a vulnerable system. These issues are caused by buffer overflows and directory traversal errors in the Backup Client Service (OmniInet.exe) when processing user-supplied packets, which could be exploited by remote unauthenticated attackers to view or download arbitrary files on a vulnerable system or execute arbitrary code with SYSTEM privileges.