Multiple stack-based buffer overflows in the inet service in HP OpenView Storage Data Protector 6.00 through 6.20 allow remote attackers to…

1. 2011-06-29 First public exploit (Metasploit exploit/windows/misc/hp_omniinet_3)
2. 2011-07-01 Published

88.95% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-09).

• Metasploit exploit/windows/misc/hp_omniinet_3 HP OmniInet.exe Opcode 27 Buffer Overflow metasploit exploit, great rank, 2011-06-29
• Metasploit exploit/windows/misc/hp_omniinet_4 HP OmniInet.exe Opcode 20 Buffer Overflow metasploit exploit, good rank, 2011-06-29
• EDB-17490 HP OmniInet.exe Opcode 20 - Remote Buffer Overflow (Metasploit) remote, 2011-07-04
• EDB-17468 HP Data Protector 6.11 - Remote Buffer Overflow (DEP Bypass) remote, 2011-07-02
• EDB-17467 HP - 'OmniInet.exe' Opcode 27 Buffer Overflow (Metasploit) remote, 2011-07-01
• EDB-17458 HP Data Protector 6.20 - Multiple Vulnerabilities dos, 2011-06-29
• coresecurity.com http://www.coresecurity.com/content/HP-Data-Protector-multiple-vulnerabilities referenced PoC, tagged "exploit" by a source, unverified

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

• exploit-db.com /exploits/17467

  exploit

• exploit-db.com /exploits/17468

  exploit

• exploit-db.com /exploits/17490

  exploit

• exploit-db.com /exploits/17458

  exploit

• coresecurity.com /content/HP-Data-Protector-multiple-vulnerabilities

  exploit

• h20000.www2.hp.com /bizsupport/TechSupport/Document.jsp?objectID=c02872182

  vendor-advisory

• secunia.com /advisories/45100

  third-party-advisory, vendor-advisory

• securitytracker.com /id?1025731

  vdb-entry

• securityfocus.com /bid/48486

  vdb-entry

• securityreason.com /securityalert/8291

  third-party-advisory

• securityreason.com /securityalert/8288

  third-party-advisory

• exchange.xforce.ibmcloud.com /vulnerabilities/68281

  vdb-entry

• securityreason.com /securityalert/8295

  third-party-advisory

• securityreason.com /securityalert/8290

  third-party-advisory

• CVE List CVE-2011-1865
• NVD CVE-2011-1865

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.