CVE-2007-2280: Stack-based buffer overflow in OmniInet.exe (aka the backup client service daemon) in the Application Recov...

Security readout for executives and security teams

This is a remote code execution flaw in HP OpenView Storage Data Protector’s backup client service. An attacker who can reach OmniInet.exe could crash or take over the service by sending oversized protocol data. Backup systems often have broad access, so exposure matters even though the supplied sources do not show active exploitation. Exposure is most likely on hosts running HP OpenView Storage Data Protector 5.50 or 6.0 with the OmniInet.exe service reachable over the network. Internet exposure is not stated in the sources; internal network exposure may still be significant because backup clients often span many servers. Prioritize this if legacy HP OpenView Storage Data Protector remains in production. Remote code execution in backup software can affect high-value infrastructure, but urgency depends on confirmed product presence and network reachability. Mitigation focus: Identify any HP OpenView Storage Data Protector 5.50 or 6.0 systems.; Review HP advisory HPSBMA02252 for vendor-approved updates or mitigations.; Restrict network access to OmniInet.exe to trusted backup infrastructure..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.