CVE-2011-1731: Stack-based buffer overflow in OmniInet.exe in the Backup Client Service in HP OpenView Storage Data Protec...

Security readout for executives and security teams

This CVE describes a remote code execution flaw in HP OpenView Storage Data Protector. A vulnerable backup client service can be crashed or potentially taken over by a malformed message. The business risk is highest where old Data Protector clients remain reachable across internal networks or from untrusted segments. Exposure is likely limited to organizations still running HP OpenView Storage Data Protector 6.00, 6.10, or 6.11 client services. Risk increases if OmniInet.exe or the Backup Client Service is reachable from broad internal networks, backup networks, or untrusted hosts. Treat this as a high-priority legacy infrastructure risk if affected Data Protector versions remain in service. Backup systems often hold broad privileges and sensitive data, so exposure could affect recovery operations and server integrity. Prioritize inventory, vendor guidance review, and network isolation. Mitigation focus: Identify all HP OpenView Storage Data Protector 6.00, 6.10, and 6.11 installations.; Review HP advisory HPSBMA02668 for the vendor-approved fix or upgrade path.; Restrict Backup Client Service access to trusted backup infrastructure only..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.