[security bulletin] HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01471755 Version: 1 HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information in this...

Null pointer dereference

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service crash via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure...

CVE-2008-1851

Technical details about CVE-2008-1851 are not publicly provided in the connected documents; the records only reiterate that ovalarmsrv in HP OpenView NNM may cause a DoS via certain incomplete requests. Monitor for updates.

CVE-2008-1851

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service hang via certain requests that do not provide all required arguments...

CVE-2008-0068

CVE-2008-0068 describes a directory traversal vulnerability in HP OpenView Network Node Manager (OV NNM) OpenView5.exe, affecting OV NNM versions 7.01, 7.51, and 7.53. The vulnerability allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter. HP’s...

Integer overflow

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

CVE-2008-1842

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

HP OpenView网络节点管理器目录遍历及拒绝服务漏洞

BUGTRAQ ID: 28745 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的多个服务和组件中存在目录遍历和拒绝服务漏洞，允许远程攻击者通过提交恶意请求导致服务崩溃或下载任意文件。 --------------------------- A CGI目录遍历 --------------------------- NNM中的CGI使用一些指令过滤掉客户端传送参数中的恶意字符，但这些CGI所过滤掉的路径分隔符为反斜线，因此攻击者可以使用斜线执行目录遍历攻击，从磁盘上下载文件。...

HP OpenView Network Node Manager <= 7.53 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A CGIs directory traversal...

closedviewx.txt

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...

Re: Multiple vulnerabilities in HP OpenView NNM 7.53

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bug: memory corruption in ovspmd Exploitation: remote Date: 08 Apr 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Stack overflow

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager OV NNM 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of thes...

CVE-2008-1697

CVE-2008-1697 : HP OpenView Network Node Manager (OV NN M) prior to or at versions 7.53/7.51 is affected by a stack-based buffer overflow in ovash? Actually OVAS.EXE within OV NNM. The root cause is improper handling of long HTTP GET requests, enabling a remote attacker to execute arbitrary code ...

HP OpenView NNM 7.53 Multiple Remote Vulnerabilities

No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A format string in ovalarmsrv...

hpopenview-multi.txt

Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: From vendor's website: OpenView NNM "automates the process of developing a hyper-accurate topology of your physical network, virtual network services and the complex relationships betwe...

HP OpenView NNM 7.53 Multiple Remote Vulnerabilities

Exploit for unknown platform in category dos / poc ==================================================== HP OpenView NNM 7.53 Multiple Remote Vulnerabilities ==================================================== Luigi Auriemma Application: HP OpenView Network Node Manager...

HP OpenView NNM 7.5.1 OVAS.exe SEH PRE AUTH Overflow Exploit

No description provided by source. !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug...

hpopenviewnnm-overflow.txt

!/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability was found, analysed and exploited as...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - OVAS.exe Overflow (SEH)

HP OpenView Network Node Manager OV NNM 7.5.1 - OVAS.exe Overflow SEH !/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt...

HP OpenView Network Node Manager (OV NNM) 7.5.1 - 'OVAS.exe' Overflow (SEH)

!/usr/bin/python HP OpenView NNM 7.5.1 OVAS.EXE Pre Authentication SEH Overflow Tested on Windows 2003 Server SP1. Coded by Mati Aharoni muts..at..offensive-security.com http://www.offensive-security.com/0day/hp-nnm-ov.py.txt shameless plug This vulnerability was found, analysed and exploited as...