289 matches found
HP OpenView Network Node Manager (OV NNM) 7.53 - ovalarm.exe CGI Remote Buffer Overflow
HP OpenView Network Node Manager OV NNM 7.53 - ovalarm.exe CGI Remote Buffer Overflow !/usr/bin/python HP NNP ovalarm.exe CGI Remote Buffer Overflow - Pre Authentication Tested on XP SP3 + IIS + NNM Release B.07.50 Authors: muts & sinn3r x90.sinner a.t gmail.c0m Reference:...
HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow
Exploit for unknown platform in category remote exploits ===================================================================== HP NNM 7.53 ovalarm.exe CGI Pre Authentication Remote Buffer Overflow ===================================================================== Title: HP NNM 7.53 ovalarm.exe...
CVE-2009-0898
CVE-2009-0898 is a stack-based buffer overflow in HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53 that allows remote code execution via a crafted HTTP request. The vulnerability affects OV NNM running on HP-UX, Linux, Solaris, and Windows, with the impact described as remo...
Design/Logic Flaw
The port-3443 HTTP server in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts...
CVE-2009-4179
Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action...
CVE-2009-4177
Buffer overflow in webappmon.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header...
CVE-2009-3845
The port-3443 HTTP server in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts...
Heap overflow
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long 1 userid or 2 passwd parameter...
CVE-2009-4181
HP OpenView Network Node Manager (NNM) ivovwebsnmpsrv.exe vulnerability (CVE-2009-4181) in the ovwebsnmpsrv.exe component allows remote code execution by sending crafted sel and arg parameters to jovgraph.exe (CGI). Affected NNM versions include 7.01, 7.51, and 7.53. The root cause is a stack-bas...
CVE-2009-4180
Stack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header...
CVE-2009-3849
Multiple stack-based buffer overflows in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long Template parameter to nnmRptConfig.exe, related to the strcat function; or 2 a long Oid parameter to snmp.exe...
CVE-2009-3846
HP OpenView Network Node Manager (NNM) vulnerable in OV NNM 7.01, 7.51, and 7.53 due to multiple heap-based overflow flaws in ovlogin.exe when processing userid and passwd parameters in HTTP requests. Remote attackers can potentially execute arbitrary code (often with SYSTEM privileges) by sendin...
CVE-2009-3848
CVE-2009-3848 describes a stack-based buffer overflow in HP OpenView Network Node Manager (NNM) when handling the Template parameter in the nnmRptConfig.exe CGI. The root cause is copying a long Template into a fixed-size stack buffer via vsprintf, enabling a remote attacker to execute arbitrary ...
CVE-2009-4178
CVE-2009-4178 is a documented heap/stack overflow in HP OpenView Network Node Manager’s OvWebHelp.exe CGI Topic handling. Remote attackers could exploit a crafted Topic parameter to execute arbitrary code. Affected versions include OV NNM 7.50/7.53 (and related 7.x builds noted in public advisori...
CVE-2009-4180
HP OpenView Network Node Manager (OV NNM) snmpviewer.exe has a buffer overflow in the CGI Host header handling, allowing remote code execution via a long HTTP Host header on OV NNM 7.01, 7.51, and 7.53. Root cause: boundary/ strcat usage leading to overflow in Host header processing. Impact is re...
CVE-2009-3847
CVE-2009-3847 affects HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53. The description is an unspecified remote code execution vulnerability, with remediation referenced in HP patches PHSS_40374/PHSS_40375 and guidance to upgrade patches for OV NNM 7.53 (and older versions) as docu...
CVE-2009-3847
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2009-3849
HP OpenView Network Node Manager (OV NNM) contains a family of stack-based buffer overflows in 7.01, 7.51, and 7.53 that allow remote code execution via a long Template parameter to nnmRptConfig.exe or a long Oid value to snmp.exe. Public references (Metasploit module, Exploit-DB, and advisories)...
CVE-2009-3845
HP OpenView Network Node Manager (OV NNM) vulnerable on port 3443 HTTP server for OV NNM versions 7.01, 7.51 and 7.53. The hostname parameter is not properly sanitized in Perl/CGI scripts, allowing remote attackers to inject and execute arbitrary commands. Documented components include setMon.ovp...
