321 matches found
HP OpenView Network Node Manager CGI缓冲区溢出漏洞
HP OpenView Network Node Manager是一款网络节点管理程序 HP OpenView Network Node Manager包含的CGI应用程序存在边界条件错误，远程攻击者可以利用漏洞以WEB进程权限执行任何指令。 问题是由于CGI应用程序在调用sprintf时缺少边界检查，发送超长参数给各种CGI变量可导致典型的堆栈缓冲区溢出，精心构建参数数据可能以WEB进程权限执行任何指令。 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 HP OpenView...
[security bulletin] HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01188923 Version: 1 HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should...
HP OpenView Network Node Manager Multiple CGI Remote Overflows
The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...
HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/hp/nnmopenview5 msf undefinednnmopenview5 show actions ...actions... ms...
CVE-2003-1494: Improper Restriction of Operations within the Bounds of a Memory Buffer
Unspecified vulnerability in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service CPU consumption via a crafted TCP packet...
CVE-2003-1493: Undefined Security Weakness
Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...
HP-UX PHSS_36385 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)
s700800 11.X PA-RISC OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of...
HP-UX PHSS_36386 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)
s700800 11.X IA-64 OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of arbitra...
CVE-2007-1727: Undefined Security Weakness
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors...
CVE-2007-0441
CVE-2007-0441 affects HP OpenView Network Node Manager (OV NNM) , impacting versions 6.20, 6.4x, 7.01, and 7.50. The vulnerability enables remote attackers to execute arbitrary commands via unknown vectors. Public sources reference the issue as a remote command/code execution vulnerability (no ex...
CVE-2007-0441: Undefined Security Weakness
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknown vectors...
CVE-2007-0206: Undefined Security Weakness
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to read arbitrary files via unknown vectors...
CVE-2006-2580: Undefined Security Weakness
Multiple unspecified vulnerabilities in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors...
[security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBMA01224 REVISION: 5 SSRT051023 rev.5 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: ...
CVE-2005-2773: Improper Neutralization of Special Elements used in a Command
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...
CVE-2005-2773
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...
HP OpenView Network Node Manager <= 7.50 Remote Exploit
Exploit for multiple platform in category remote exploits ======================================================= HP OpenView Network Node Manager //In/Out include winsock2...
HP OpenView Network Node Manager 7.50 - Remote Command Execution
HP OpenView Network Node Manager 7.50 - Remote Command Execution / Web Browser info: /OvCgi/connectedNodes.ovpl?node=a|command| /str0ke / / HP OpenView Network Node Manager 6.2, 6.4, 7.01, 7.50 Remote Command Execution Name: HP OV NNM Remote Command Execution Exploit File: HPOVNNMRCE.c Descriptio...
HP OpenView Network Node Manager <= 7.50 Remote Exploit
No description provided by source. / Web Browser info: /OvCgi/connectedNodes.ovpl?node=a|command| /str0ke / / HP OpenView Network Node Manager 6.2, 6.4, 7.01, 7.50 Remote Command Execution Name: HP OV NNM Remote Command Execution Exploit File: HPOVNNMRCE.c Description: Exploit Author: Lympex...
HP-UX PHSS_32692 : HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Privileged Code Execution, Denial of Service (DoS) (HPSBMA01140 SSRT4795, SSRT4797, SSRT4864 rev.2)
s700800 11.X OV NNM7.50 Patch for Jan-05 : Potential vulnerabilities have been identified with OpenView Network Node Manager OV NNM. These vulnerabilities could be exploited remotely by an unauthorized user to execute privileged code or to cause a Denial of ServiceDoS. %NASLMINLEVEL 70300 C Tenab...