CVE-2011-0271

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

CVE-2011-0268

CVE-2011-0268 is a buffer overflow in HP OpenView Network Node Manager (OV NNM) using the nnmRptConfig.exe component. It affects OV NNM 7.51 and 7.53 and can allow remote attackers to execute arbitrary code by sending a specially crafted long text1 parameter to the affected CGI, as described in m...

CVE-2011-0263

Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 Source Node or 2 Destination Node variable...

CVE-2011-0262

Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe...

CVE-2011-0266

CVE-2011-0266 relates to HP OpenView Network Node Manager (OV NNM) where a buffer overflow in nnmRptConfig.exe is triggered by a long nameParams parameter, leading to remote code execution. The initial CVE description specifies OV NNM versions 7.51 and 7.53 as affected. Connected documents show p...

CVE-2011-0266

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2...

CVE-2011-0268

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter...

CVE-2011-0264

CVE-2011-0264 : Stack-based buffer overflow in ovutil.dll of HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote code execution via a long COOKIE variable. The flaw is triggered by handling user-supplied COOKIE data and can execute code with the web server’s privileges (Windows ...

CVE-2011-0262

CVE-2011-0262 is a remote-code-execution buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51/7.53, triggered by oversized parameters to jovgraph.exe via ovwebsnmpsrv.exe’s stringToSeconds in ovutil.dll. The vulnerability is exploitable over the network through crafted HTTP requests ...

CVE-2011-0269

HP OpenView Network Node Manager (OV NNM) nnmRptConfig.exe CGI is vulnerable to a buffer/boundary overflow when processing a crafted schd_select1 parameter, enabling remote code execution on OV NNM 7.51 and 7.53 (Windows/IA-64 and PA-RISC variants). Exploitation relies on sending a long schd_sele...

CVE-2011-0267

Summary of CVE-2011-0267 (HP OpenView NNM): The vulnerability affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 and is associated with the nnmRptConfig.exe component. Affected functionality involves two parameters, schdParams and nameParams, where an overly long input can trigger a ...

CVE-2011-0263

Affected product: HP OpenView Network Node Manager (OV NNM) versions 7.51 and 7.53 running on various OSes. Vulnerability: Multiple stack-based buffer overflows in the ovas.exe component (OVAS service) allow remote code execution via long Source Node or Destination Node names. Impact: Remote atta...

[security bulletin] HPSBMA02621 SSRT100352 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02670501 Version: 2 HPSBMA02621 SSRT100352 rev.2 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

HP OpenView Network Node Manager Multiple RCE Vulnerabilities

HP OpenView Network Node Manager is prone to multiple remote code- execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

HP OpenView Network Node Manager code execution

Unfiltered shell characters in CGI scripts allow code execution...

HP OpenView Network Node Manager ovutil.dll stringToSeconds Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw...

HP OpenView NNM nnmRptConfig.exe schdParams Buffer Overflow

This module exploits NNM's nnmRptConfig.exe. Similar to other NNM CGI bugs, the overflow occurs during a ov.sprintfnew call, which allows an attacker to overwrite data on the stack, and gain arbitrary code execution. Module Options msf use exploit/windows/http/hp/nnmnnmrptconfigschdparams msf...

HP OpenView NNM nnmRptConfig nameParams Buffer Overflow

This module exploits a vulnerability in HP NNM's nnmRptConfig.exe. A remote user can send a long string data to the nameParams parameter via a POST request, which causes an overflow on the stack when function ov.sprintfnew is used, and gain arbitrary code execution.' Module Options msf use...

HP OpenView Network Node Manager ovas.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The flaw exists within the ovas.exe component which listens by default on TCP port 7510...

HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmsnmp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...