CVE-2011-1736

CVE-2011-1736 describes a directory traversal vulnerability in the Backup Client Service (OmniInet.exe) of HP OpenView Storage Data Protector versions 6.00, 6.10, and 6.11. This flaw allows unauthenticated remote attackers to read arbitrary files by injecting directory traversal sequences into filenames within GET_FILE messages. With a CVSS score of 8.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete confidentiality compromise and partial availability impact. Despite its age and high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.