Full title: HP Data Protector Backup Client Service Remote Code Execution 
Category: remote exploits
Platform: windows
This Metasploit module abuses the Backup Client Service (OmniInet.exe) to achieve remote code execution. The vulnerability exists in the EXEC_BAR operation, which allows to execute arbitrary processes. This Metasploit module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2.

# 0day.today @ http://0day.today/