HP OpenView Network Node Manager code execution

Unfiltered shell characters in CGI scripts allow code execution...

CVE-2011-0264: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long COOKIE variable...

HP OpenView Network Node Manager Multiple RCE Vulnerabilities

HP OpenView Network Node Manager is prone to multiple remote code- execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2011-0266: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2...

CVE-2011-0263: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in ovas.exe in the OVAS service in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 Source Node or 2 Destination Node variable...

CVE-2011-0261: Undefined Security Weakness

Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter...

CVE-2011-0270: Use of Externally-Controlled Format String

Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name...

CVE-2011-0271: Improper Neutralization of Special Elements used in an OS Command

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

CVE-2011-0269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long schdselect1 parameter...

CVE-2011-0265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long dataselect1 parameter...

CVE-2011-0268: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter...

CVE-2011-0267: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 schdParams or 2 nameParams parameter, a different vulnerability than CVE-2011-0266...

PT-2011-2245

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a command injection vulnerability. It arises from the CGI scripts in the software not properly validating an unspecified parameter, allowing remote...

CVE-2011-0262: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe...

PT-2011-2237

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to multiple stack-based buffer overflows in the ovas.exe component of the OVAS service. This allows remote attackers to execute arbitrary code by...

PT-2011-2240

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a long nameParams parameter in nnmRptConfig.exe. This is a remote code execution vulnerability...

PT-2011-2244

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name. Recommendations For HP...

PT-2011-2242

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a buffer overflow in the nnmRptConfig.exe component, allowing remote attackers to execute arbitrary code. This is achieved by providing a long text...

PT-2011-2243

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a long schd select1 parameter in the nnmRptConfig.exe component. This enables attackers to potentially gain...

PT-2011-2238

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a stack-based buffer overflow in the ovutil.dll component. This allows remote attackers to execute arbitrary code by providing a long COOKIE...