HP OpenView网络节点管理器ovspmd远程堆溢出漏洞

BUGTRAQ ID: 28689 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的ovspmd服务实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 OV NNM的ovspmd服务运行在TCP 8886端口上，该服务检查长度值是否低于9216字节（目标缓冲区的大小）以防范缓冲区溢出，但这是一个有符比较，因此使用0x80000000和0x80000003之间的负数值就可以触发堆溢出，导致执行任意指令。 HP OpenView Network Node Manager = 7.53 HP -...

HP OpenView Network Node Manager (OV NNM) 7.x - OpenView5.exe?Action Traversal Arbitrary File Access

HP OpenView Network Node Manager OV NNM 7.x - OpenView5.exe?Action Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/28745/info HP OpenView Network Node Manager is prone to multiple vulnerabilities affecting the 'ovalarmsrv.exe' and 'ovtopmd.exe' processes. These issues...

Re: Multiple vulnerabilities in HP OpenView NNM 7.53

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bug: memory corruption in ovspmd Exploitation: remote Date: 08 Apr 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

CVE-2008-1697

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager OV NNM 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of thes...

Stack overflow

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager OV NNM 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of thes...

DSquare Exploit Pack: D2SEC_HPOVAS

Name| d2sechpovas ---|--- CVE| CVE-2008-1697 Exploit Pack| D2ExploitPack Description| HP OpenView Network Node Manager 7.5.3 Stack Overflow Notes|...

CVE-2008-1697

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager OV NNM 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of thes...

HP OpenView NNM 7.53 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv...

HP OpenView Network Node Manager 7.x - 'ovspmd' Buffer Overflow

source: https://www.securityfocus.com/bid/28689/info HP OpenView Network Node Manager is prone to a buffer-overflow vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the Network Node Manager process. This facilitates the remote...

HP OpenView Network Node Manager 7.x - ovspmd Buffer Overflow

HP OpenView Network Node Manager 7.x - ovspmd Buffer Overflow source: https://www.securityfocus.com/bid/28689/info HP OpenView Network Node Manager is prone to a buffer-overflow vulnerability. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of t...

HP OpenView Network Node Manager multiple security vulnerabilities

Buffer overflows, format string vulnerabilities, DoS conditions on TCP/2953, TCP/2954 traffic parsing...

hpopenview-multi.txt

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...

Multiple vulnerabilities in HP OpenView NNM 7.53

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv B multiple buffer-overflows in ovalarmsrv C Denial of Service in ovalarmsrv Exploitation:...

HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities

HP OpenView Network Node Manager OV NNM 7.53 - Multiple Vulnerabilities Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physic...

HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...

HP OpenView NNM 7.53 Multiple Remote Vulnerabilities

Exploit for unknown platform in category dos / poc ==================================================== HP OpenView NNM 7.53 Multiple Remote Vulnerabilities ==================================================== Luigi Auriemma Application: HP OpenView Network Node Manager...

HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit

No description provided by source. !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug...

hpopenviewnnm-overflow.txt

!/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability was found, analysed and exploited as...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - OVAS.exe Overflow (SEH)

HP OpenView Network Node Manager OV NNM 7.5.1 - OVAS.exe Overflow SEH !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt...

HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication Stack Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager versions 7.53 and earlier. Specifically this vulnerability is caused by a failure to properly handle user supplied input within the HTTP request including headers and the actual URL GET request. Exploitation is trick...