CVE-2009-3844

CRITICAL 10.0CVE-2009-3844 · Published 08/12/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
openview data protector application recovery manager hp	`= 5.50= 6.0`	No fix yet

Description

Stack-based buffer overflow in the OmniInet process in HP OpenView Data Protector Application Recovery Manager 5.50 and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted MSG_PROTOCOL packet.

References

marc.info
secunia.com/advisories/37600 · Vendor Advisory
securitytracker.com/id
securityfocus.com/archive/1/508329/100/0/threaded
securityfocus.com/bid/37250
vupen.com/english/advisories/2009/3454 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-09-091 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/54638

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free