HP OpenView Network Node Manager CGI缓冲区溢出漏洞

HP OpenView Network Node Manager是一款网络节点管理程序 HP OpenView Network Node Manager包含的CGI应用程序存在边界条件错误，远程攻击者可以利用漏洞以WEB进程权限执行任何指令。 问题是由于CGI应用程序在调用sprintf时缺少边界检查，发送超长参数给各种CGI变量可导致典型的堆栈缓冲区溢出，精心构建参数数据可能以WEB进程权限执行任何指令。 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 HP OpenView...

[security bulletin] HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01188923 Version: 1 HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should...

HP OpenView Network Node Manager Multiple CGI Remote Overflows

The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...

HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow

This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request, an attacker may be able to execute arbitrary code. Module Options msf use exploit/windows/http/hp/nnmopenview5 msf undefinednnmopenview5 show actions ...actions... ms...

CVE-2003-1494: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unspecified vulnerability in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service CPU consumption via a crafted TCP packet...

CVE-2003-1493: Undefined Security Weakness

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

HP-UX PHSS_36901 : s700_800 11.X OV NNM7.51 PA-RISC Intermediate Patch 17

s700800 11.X OV NNM7.51 PA-RISC Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute...

HP-UX PHSS_36386 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)

s700800 11.X IA-64 OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of arbitra...

HP-UX PHSS_36385 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)

s700800 11.X PA-RISC OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of...

HP-UX PHSS_35113 : s700_800 11.X OV NNM6.2 Intermediate Patch 19

s700800 11.X OV NNM6.2 Intermediate Patch 19 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute arbitrary...

CVE-2007-1727: Undefined Security Weakness

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors...

CVE-2007-0441

CVE-2007-0441 affects HP OpenView Network Node Manager (OV NNM) , impacting versions 6.20, 6.4x, 7.01, and 7.50. The vulnerability enables remote attackers to execute arbitrary commands via unknown vectors. Public sources reference the issue as a remote command/code execution vulnerability (no ex...

CVE-2007-0441: Undefined Security Weakness

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2007-0206: Undefined Security Weakness

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to read arbitrary files via unknown vectors...

HP-UX PHSS_34871 : s700_800 11.23 OV NNM7.50 IA-64 Consolidated Patch 4

s700800 11.23 OV NNM7.50 IA-64 Consolidated Patch 4 : A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to gain read access to files with the permissions of the NNM server. %NASLMINLEV...

HP-UX PHSS_27222 : HP-UX, HP Jetdirect, HP Procurve Switches, HP OpenView Network Node Manager (NNM), OpenView Distributed Management (DM), HP TopTools Remote Control Card Running SNMP, Remote Unauthorized Access, Denial of Service (DoS) (HPSBUX00184 SSRT071347 rev.17)

s700800 11.00 OV NNM6.0x pmd/ovtrapd fixes : Vulnerabilities in SNMP request and trap handling. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS27222. The text itself is copyright C Hewlett-Packard...

CVE-2006-2580: Undefined Security Weakness

Multiple unspecified vulnerabilities in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors...

[security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 HP SECURITY BULLETIN HPSBMA01224 REVISION: 5 SSRT051023 rev.5 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. INITIAL RELEASE: ...

CVE-2005-2773

CVE-2005-2773 affects HP OpenView Network Node Manager 6.2 through 7.50. The vulnerability enables remote attackers to execute arbitrary commands by injecting shell metacharacters into parameters handled by CGI scripts (connectedNodes.ovpl, cdpView.ovpl, freeIPaddrs.ovpl, ecscmg.ovpl). Public wri...

CVE-2005-2773: Improper Neutralization of Special Elements used in a Command

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 node parameter to connectedNodes.ovpl, 2 cdpView.ovpl, 3 freeIPaddrs.ovpl, and 4 ecscmg.ovpl...