Buffer overflow

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter...

Buffer overflow

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 schdParams or 2 nameParams parameter, a different vulnerability than CVE-2011-0266...

Command injection

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

CVE-2011-0264

Stack-based buffer overflow in ovutil.dll in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long COOKIE variable...

CVE-2011-0265

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long dataselect1 parameter...

CVE-2011-0270

The CVE-2011-0270 issue affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53. A format-string vulnerability in the CGI program nnmRptConfig.exe when processing an HTTP request with a crafted Template name allows remote code execution. Affected platforms include HP-UX, Linux, Solaris, a...

CVE-2011-0271

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

CVE-2011-0268

CVE-2011-0268 is a buffer overflow in HP OpenView Network Node Manager (OV NNM) using the nnmRptConfig.exe component. It affects OV NNM 7.51 and 7.53 and can allow remote attackers to execute arbitrary code by sending a specially crafted long text1 parameter to the affected CGI, as described in m...

CVE-2011-0267

Summary of CVE-2011-0267 (HP OpenView NNM): The vulnerability affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 and is associated with the nnmRptConfig.exe component. Affected functionality involves two parameters, schdParams and nameParams, where an overly long input can trigger a ...

CVE-2011-0271

Summary : CVE-2011-0271 affects HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53. The CGI scripts do not properly validate an unspecified parameter, enabling remote attackers to execute arbitrary commands via a crafted value (command injection) on the affected web server. This vulnerabilit...

CVE-2011-0264

CVE-2011-0264 : Stack-based buffer overflow in ovutil.dll of HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote code execution via a long COOKIE variable. The flaw is triggered by handling user-supplied COOKIE data and can execute code with the web server’s privileges (Windows ...

CVE-2011-0262

CVE-2011-0262 is a remote-code-execution buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51/7.53, triggered by oversized parameters to jovgraph.exe via ovwebsnmpsrv.exe’s stringToSeconds in ovutil.dll. The vulnerability is exploitable over the network through crafted HTTP requests ...

CVE-2011-0263

Affected product: HP OpenView Network Node Manager (OV NNM) versions 7.51 and 7.53 running on various OSes. Vulnerability: Multiple stack-based buffer overflows in the ovas.exe component (OVAS service) allow remote code execution via long Source Node or Destination Node names. Impact: Remote atta...

CVE-2011-0269

HP OpenView Network Node Manager (OV NNM) nnmRptConfig.exe CGI is vulnerable to a buffer/boundary overflow when processing a crafted schd_select1 parameter, enabling remote code execution on OV NNM 7.51 and 7.53 (Windows/IA-64 and PA-RISC variants). Exploitation relies on sending a long schd_sele...

CVE-2011-0266

CVE-2011-0266 relates to HP OpenView Network Node Manager (OV NNM) where a buffer overflow in nnmRptConfig.exe is triggered by a long nameParams parameter, leading to remote code execution. The initial CVE description specifies OV NNM versions 7.51 and 7.53 as affected. Connected documents show p...

iDefense Security Advisory 01.10.11: HP Network Node Manager Command Injection Vulnerability

iDefense Security Advisory 01.10.11 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 10, 2011 I. BACKGROUND HP Network Node Manager Command Injection Vulnerability HP Network Node Manager NNM is an application suite that is used to map out and manage network topography. NNM runs on a...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe schdParams/nameParams Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nnmRptConfig.exe module exposed by the webserver that listens by default o...

HP OpenView NNM nnmRptConfig.exe schdParams Buffer Overflow

This module exploits NNM's nnmRptConfig.exe. Similar to other NNM CGI bugs, the overflow occurs during a ov.sprintfnew call, which allows an attacker to overwrite data on the stack, and gain arbitrary code execution. Module Options msf use exploit/windows/http/hp/nnmnnmrptconfigschdparams msf...

HP OpenView NNM nnmRptConfig nameParams Buffer Overflow

This module exploits a vulnerability in HP NNM's nnmRptConfig.exe. A remote user can send a long string data to the nameParams parameter via a POST request, which causes an overflow on the stack when function ov.sprintfnew is used, and gain arbitrary code execution.' Module Options msf use...

HP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)

$Id: hpnnmsnmp.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...