HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Code Execution

Exploit for windows platform in category remote exploits ======================================================================= HP OpenView NNM getnnmdata.exe CGI Invalid MaxAge Remote Code Execution ======================================================================= Exploit Title: HP OpenVi...

Buffer overflow

Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683...

CVE-2010-1964

Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683...

CVE-2010-1964

CVE-2010-1964: HP OpenView Network Node Manager ovwebsnmpsrv.exe main/ovutil buffer overflows enable remote code execution via long arg to jovgraph.exe (CGI) in OV NNM 7.53 (and 7.51 per description). Root cause is a stack-based overflow with no stack cookies, allowing SEH overwrites when process...

HP OpenView NNM ovwebsnmpsrv.exe Command Line Argument Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ovwebsnmpsrv.exe process which can be reached remote...

HP OpenView NNM snmpviewer.exe CGI Stack Buffer Overflow (CVE-2010-1552)

HP OpenView product consists of a suite of network and system management software applications developed by HP. It includes several optional modules and components, such as OpenView Quality Manager, OpenView Performance Insight, and OpenView Network Node Manager. A stack buffer overflow...

CVE-2010-1961

Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function...

Buffer overflow

Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function...

CVE-2010-1961

Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function...

CVE-2010-1960

Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe...

CVE-2010-1960

CVE-2010-1960 is a buffer overflow in HP OpenView Network Node Manager (OV NNM) ovwebsnmpsrv.exe. The flaw occurs in handling HTTP requests to the jovgraph.exe CGI, allowing a remote attacker to execute arbitrary code via a crafted long option to jovgraph.exe. Affected are OV NNM versions around ...

CVE-2010-1961

CVE-2010-1961 concerns a stack buffer overflow in HP OpenView Network Node Manager (OV NNM) via ovwebsnmpsrv.exe, caused by improper handling of long arguments passed to jovgraph.exe, due to a vulnerable ovutil.dll call (sprintf). Affected products are OV NNM 7.51 and 7.53; exploitation could lea...

[security bulletin] HPSBMA02537 SSRT010027 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02217439 Version: 1 HPSBMA02537 SSRT010027 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

Hewlett-Packard OpenView NNM ovwebsnmpsrv.exe Bad Option Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ovwebsnmpsrv.exe process which can be reached remote...

Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ovutil.dll module which is loaded by the...

Stack overflow

Stack-based buffer overflow in the OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter...

CVE-2010-1553

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid MaxAge parameter...

CVE-2010-1555

HP OpenView Network Node Manager (OV NNM) is affected by CVE-2010-1555 due to a stack-based buffer overflow when processing the Hostname parameter. Affects OV NNM versions 7.01, 7.51, 7.53 (and observed in 7.50/7.53 in exploits). Root cause: boundary error in getnnmdata.exe during Hostname handl...

CVE-2010-1551

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on multiple OSes is affected by a stack-based buffer overflow in the _OVParseLLA function of ov.dll within netmon.exe, triggered by the sel POST parameter, allowing remote code execution. The vulnerability is exploitable via crafted H...

CVE-2010-1554

HP OpenView Network Node Manager (NNM) getnnmdata.exe CGI accepts a crafted ICount parameter, triggering a stack-based buffer overflow that can allow remote code execution. Affected products appear in 7.01, 7.51, 7.53 (per initial CVE entry); separate exploit references describe exploitation for ...