HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Topic Overflow

!/usr/bin/python Exploit title: HP OpenView NNM OvWebHelp.exe CGI Topic overflow Date: 2010.03.30 Software link: hp.com Version: 7.53 Tested on: Windows 2003 SP2 CVE: 2009-4178 Code: Trying 172.16.29.130... Connected to 172.16.29.130. Escape character is '^'. Microsoft Windows Version 5.2.3790 C...

HP OpenView Network Node Manager (OV NNM) - OvWebHelp.exe CGI Topic Overflow

HP OpenView Network Node Manager OV NNM - OvWebHelp.exe CGI Topic Overflow !/usr/bin/python Exploit title: HP OpenView NNM OvWebHelp.exe CGI Topic overflow Date: 2010.03.30 Software link: hp.com Version: 7.53 Tested on: Windows 2003 SP2 CVE: 2009-4178 Code: Trying 172.16.29.130... Connected to...

ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability

ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-026 March 9, 2010 -- CVE ID: CVE-2010-0447 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Performance Insight --...

HP OpenView Performance Insight code execution

It's possible to upload JSP page to server...

CVE-2010-0447

The helpmanager servlet in the web server in HP OpenView Performance Insight OVPI 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document...

Design/Logic Flaw

The helpmanager servlet in the web server in HP OpenView Performance Insight OVPI 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document...

CVE-2010-0447

The helpmanager servlet in the web server in HP OpenView Performance Insight OVPI 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document...

CVE-2010-0447

HP OVPI CVE-2010-0447 affects HP OpenView Performance Insight (OVPI) 5.4 and earlier. The vulnerability lies in the helpmanager servlet of the web server, where insufficient input validation and authentication allow remote attackers to upload arbitrary JSP pages and execute OS commands. Exploitat...

HP OpenView Network Node Manager nnmRptConfig.exe Template Buffer Overflow (CVE-2009-3848)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A stack buffer overflow exists i...

HP OpenView Network Node Manager snmp.exe Oid Variable Buffer Overflow (CVE-2009-3849)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A buffer overflow vulnerability...

HP-UX PHSS_39016 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.00 HP-UX IA64 - Core patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHSS_39514 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.10 HP-UX PA-Risc - Cell Server patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

HP-UX PHSS_39105 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.00 HP-UX PA-Risc - Cell Server patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text an...

HP-UX PHSS_39515 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.10 HP-UX IA64 - Cell Server patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

HP OpenView Network Node Manager rping Stack Buffer Overflow (CVE-2009-1420)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes hundreds of optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, OpenView Network Node Manager, etc. A stack-based buffer overflo...

HP-UX PHSS_39015 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.00 HP-UX PA-Risc - Core patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHSS_39510 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.10 HP-UX PA-Risc - Core patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHSS_39511 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.10 HP-UX IA64 - Core patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch...

HP-UX PHSS_39106 : HP OpenView Storage Data Protector, Local Unauthorized Access (HPSBMA02502 SSRT090171 rev.1)

s700800 11.X OV DP6.00 HP-UX IA64 - Cell Server patch : A potential security vulnerability has been identified with HP OpenView Storage Data Protector. The vulnerability could be exploited to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

HP OpenView Data Protector Application Recovery Manager Buffer Overflow (CVE-2009-3844)

HP OpenView Storage Data Protector is a backup solution tailored for enterprise and distributed environments. The Data Protector environment consists of a Cell Manager, backup agents, and backup device servers. The Cell Manager is the central point from which backup agents and device servers are...