CVE-2011-0270

The CVE-2011-0270 issue affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53. A format-string vulnerability in the CGI program nnmRptConfig.exe when processing an HTTP request with a crafted Template name allows remote code execution. Affected platforms include HP-UX, Linux, Solaris, a...

CVE-2011-0261

CVE-2011-0261 is a real vulnerability in HP OpenView Network Node Manager (OV NNM) where a buffer overflow in jovgraph.exe (displayWidth in the arg parameter) allows remote code execution. It affects OV NNM versions 7.51 and 7.53; exploitation targets the web CGI, enabling code execution in the w...

CVE-2011-0266

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2...

CVE-2011-0271

Summary : CVE-2011-0271 affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53. The CGI scripts do not properly validate an unspecified parameter, enabling remote attackers to execute arbitrary commands via a crafted value (command injection) on the affected web server. This vulnerabilit...

CVE-2011-0265

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long dataselect1 parameter...

CVE-2011-0268

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter...

CVE-2011-0268

CVE-2011-0268 is a buffer overflow in HP OpenView Network Node Manager (OV NNM) using the nnmRptConfig.exe component. It affects OV NNM 7.51 and 7.53 and can allow remote attackers to execute arbitrary code by sending a specially crafted long text1 parameter to the affected CGI, as described in m...

CVE-2011-0263

Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 Source Node or 2 Destination Node variable...

CVE-2011-0267

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 schdParams or 2 nameParams parameter, a different vulnerability than CVE-2011-0266...

CVE-2011-0269

HP OpenView Network Node Manager (OV NNM) nnmRptConfig.exe CGI is vulnerable to a buffer/boundary overflow when processing a crafted schd_select1 parameter, enabling remote code execution on OV NNM 7.51 and 7.53 (Windows/IA-64 and PA-RISC variants). Exploitation relies on sending a long schd_sele...

CVE-2011-0271

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

CVE-2011-0269

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long schdselect1 parameter...

CVE-2011-0265

Summary of CVE-2011-0265 : HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 contains a buffer overflow in nnmRptConfig.exe that can be triggered by an oversized data_select1 parameter in the CNX CGI interface exposed by the webserver (default port 80). This allows remote code execution wit...

CVE-2011-0262

Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe...

CVE-2011-0270

Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name...

CVE-2011-0267

Summary of CVE-2011-0267 (HP OpenView NNM): The vulnerability affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 and is associated with the nnmRptConfig.exe component. Affected functionality involves two parameters, schdParams and nameParams, where an overly long input can trigger a ...

CVE-2011-0262

CVE-2011-0262 is a remote-code-execution buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51/7.53, triggered by oversized parameters to jovgraph.exe via ovwebsnmpsrv.exe’s stringToSeconds in ovutil.dll. The vulnerability is exploitable over the network through crafted HTTP requests ...

CVE-2011-0266

CVE-2011-0266 relates to HP OpenView Network Node Manager (OV NNM) where a buffer overflow in nnmRptConfig.exe is triggered by a long nameParams parameter, leading to remote code execution. The initial CVE description specifies OV NNM versions 7.51 and 7.53 as affected. Connected documents show p...

CVE-2011-0261

Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter...

[security bulletin] HPSBMA02621 SSRT100352 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02670501 Version: 2 HPSBMA02621 SSRT100352 rev.2 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...