Description
Vulnerability in OmniBackII A.03.50 in HP 11.x and earlier allows attackers to gain unauthorized access to an OmniBack client.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
HP OpenView OmniBack II Command Execution
exploit/multi/misc/openview_omniback_exec
Exploit-DB 3
- HP OpenView OmniBack II - Command Execution (Metasploit) EDB-16291 · remote · Sep 20, 2010 · verified
- HP OpenView OmniBack II A.03.50 - Command Execution (Metasploit) EDB-9942 · remote · Feb 28, 2001 · verified
- HP OpenView OmniBack II - Generic Remote Command Execution EDB-1114 · remote · Dec 21, 2000 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- PHSS_22914 issue-tracking
- PHSS_22915 issue-tracking
- omniback-unauthorized-access(6434) vdb-entry
- HPSBUX0102-142 vendor-advisory