CVE-2003-0746

CVE-2003-0746 is a composite DoS entry tied to earlier MS03-026-style DCOM/RPC vulnerabilities (CVE-2003-0352, CVE-2003-0605). Connected sources confirm that multiple DCE/ RPC implementations, notably Microsoft Windows RPCSS/DCOM interfaces, could be overwhelmed by malformed DCERPC messages, with...

CVE-2003-0746: Undefined Security Weakness

Various Distributed Computing Environment DCE implementations, including HP OpenView, allow remote attackers to cause a denial of service process hang or termination via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such a...

CVE-2002-1408

Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...

CVE-2002-1408

Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...

CVE-2002-1408: Undefined Security Weakness

Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...

CVE-2001-1123

Vulnerability in Network Node Manager NNM 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID...

CVE-2001-1123

The CVE-2001-1123 vulnerability affects HP OpenView Network Node Manager (NNM) versions 6.2 and earlier. It allows a local attacker to potentially execute arbitrary code due to a suspected buffer overflow when processing a long hostname or object ID, enabling local privilege impact on the host ru...

CVE-2001-1123: Undefined Security Weakness

Vulnerability in Network Node Manager NNM 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID...

CVE-2001-1123

Vulnerability in Network Node Manager NNM 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID...

CVE-2001-0552

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

CVE-2001-0552

CVE-2001-0552 affects HP OpenView Network Node Manager (NNM) 6.1 and Tivoli NetView (5.x/6.x). The vulnerability arises from ovactiond handling SNMP traps; remote attackers can inject shell metacharacters in a trap message to execute arbitrary commands, gaining the privileges of ovactiond (typica...

CVE-2001-0552

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

CVE-2001-0552: Undefined Security Weakness

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

Удаленное выполнение команд через HP Openview / Tivoli NetView (remote execution)

При получении определенного snmp-trap данные передаются внешнему приложению через командную строку, при этом не производится проверка shell-символов...

openview.snmp.txt

HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVENT OVMgXNNMGener...

HP Openview NNM6.1 ovactiond bin exploit

Hello, Summery: HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVE...

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution source: https://www.securityfocus.com/bid/2845/info ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote...

HP OpenView NNM v6.1 buffer overflow

HP OpenView NNM v6.1 buffer overflow The problem.. HP OpenView NNM v6.1 has a buffer overflow in the suid-root file ecsd located in the /opt/OV/bin/ directory. ecsd is not used in NNM, but is shipped and installed suid-root as default. Details.. je@openview uname -a SunOS openview 5.8...

Переполнение буфера в HP OpenView NNM (buffer overflow)

Переполнение буфера в suid root утилите ecsd...

HP OpenView OmniBack II Command Execution

This module uses a vulnerability in the OpenView Omniback II service to execute arbitrary commands. This vulnerability was discovered by DiGiT and his code was used as the basis for this module. For Microsoft Windows targets, due to module limitations, use the "unix/cmd/generic" payload and set C...