HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

hpopen-overflow.txt

!/usr/bin/python HP OpenView Network Node Manager CGI Buffer Overflow Tested on NNM Release B.07.50 / Windows 2000 server SP4 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html Coded by Mati Aharoni muts|offensive-security|com http://www.offensive-security.com/0day/hpnnm.txt Notes: Vanil...

HP OpenView Network Node Manager CGI缓冲区溢出漏洞

HP OpenView Network Node Manager是一款网络节点管理程序 HP OpenView Network Node Manager包含的CGI应用程序存在边界条件错误，远程攻击者可以利用漏洞以WEB进程权限执行任何指令。 问题是由于CGI应用程序在调用sprintf时缺少边界检查，发送超长参数给各种CGI变量可导致典型的堆栈缓冲区溢出，精心构建参数数据可能以WEB进程权限执行任何指令。 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 HP OpenView...

HP OpenView Network Node Manager Multiple CGI Remote Overflows

The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...

[security bulletin] HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01188923 Version: 1 HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager OV NNM Remote Unauthorized Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should...

Hewlett-Packard OpenView Network Node Manager Multiple CGI Buffer Overflow Vulnerabilities

These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard HP OpenView Network Node Manager NNM. Authentication is not required to exploit these vulnerabilities. The specific flaws exists within the CGI applications that handle the...

CVE-2003-1494

The CVE-2003-1494 issue affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. A remote attacker can cause a denial of service via a crafted TCP packet, resulting in CPU consumption. The available documents describe the vulnerability and impact but do not provide a remediation or pa...

HP-UX PHSS_36773 : s700_800 11.X OV NNM7.01 Intermediate Patch 11

s700800 11.X OV NNM7.01 Intermediate Patch 11 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could by exploited remotely to allow cross site scripting XSS. HPSBMA022...

HP-UX PHSS_36901 : s700_800 11.X OV NNM7.51 PA-RISC Intermediate Patch 17

s700800 11.X OV NNM7.51 PA-RISC Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute...

HP-UX PHSS_36386 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)

s700800 11.X IA-64 OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of arbitra...

HP-UX PHSS_36385 : HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code (HPSBMA02328 SSRT071293 rev.2)

s700800 11.X PA-RISC OV NNM7.51 Intermediate Patch 16 : Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross site scripting XSS, Denial of Service DoS, or execution of...

HP-UX PHSS_35113 : s700_800 11.X OV NNM6.2 Intermediate Patch 19

s700800 11.X OV NNM6.2 Intermediate Patch 19 : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability has been identified with HP OpenView Network Node Manager OV NNM. This vulnerability could be exploited remotely by an unauthorized user to execute arbitrary...

CVE-2007-4720

Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager NNM 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors...

Code injection

Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager NNM 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-4720

Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager NNM 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors...

HP OpenView Network Node Manager unauthorized access

No description provided...

HP OpenView网络节点管理器未明远程未授权访问漏洞

HP OpenView Network Node Manager是OpenView集成的网络节点管理器。 HP OpenView Network Node Manager存在未明漏洞，远程攻击者可以利用漏洞获得对应用程序的未授权访问。 目前没有详细漏洞细节提供。 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.50 HP OpenView Network Node Manager 7.01 HP OpenView Network Node Manager 6.40 HP OpenView...

CVE-2007-1727

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors...

CVE-2007-1727

HP OpenView Network Node Manager (OV NNM) versions 6.20, 6.4x, 7.01, 7.50, and 7.51 are affected by an unspecified vulnerability that enables remote authenticated users to access certain privileged facilities via unspecified vectors. The NVD entry lists a network-exposed vector with low attack co...

CVE-2007-1727

Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to access certain privileged "facilities" via unspecified vectors...