CVE-2011-0261: Undefined Security Weakness

Unspecified vulnerability in jovgraph.exe in jovgraph in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter...

HP OpenView Network Node Manager Multiple RCE Vulnerabilities

HP OpenView Network Node Manager is prone to multiple remote code- execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only C...

CVE-2011-0271: Improper Neutralization of Special Elements used in an OS Command

The CGI scripts in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."...

PT-2011-2245

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a command injection vulnerability. It arises from the CGI scripts in the software not properly validating an unspecified parameter, allowing remote...

CVE-2011-0267: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long 1 schdParams or 2 nameParams parameter, a different vulnerability than CVE-2011-0266...

PT-2011-2236

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a buffer overflow in the stringToSeconds function in ovutil.dll, which is part of ovwebsnmpsrv.exe in HP OpenView Network Node Manager. This allows...

PT-2011-2235

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter. This is related to an unspecified vulnerability in...

PT-2011-2243

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a long schd select1 parameter in the nnmRptConfig.exe component. This enables attackers to potentially gain...

PT-2011-2241

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to multiple buffer overflows in the nnmRptConfig.exe component. These buffer overflows can be triggered by remote attackers via a long schdParams or...

PT-2011-2242

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a buffer overflow in the nnmRptConfig.exe component, allowing remote attackers to execute arbitrary code. This is achieved by providing a long text...

PT-2011-2238

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a stack-based buffer overflow in the ovutil.dll component. This allows remote attackers to execute arbitrary code by providing a long COOKIE...

PT-2011-2239

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to a buffer overflow in the nnmRptConfig.exe component. This allows remote attackers to execute arbitrary code via a long data select1 parameter...

PT-2011-2237

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue is related to multiple stack-based buffer overflows in the ovas.exe component of the OVAS service. This allows remote attackers to execute arbitrary code by...

PT-2011-2240

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code via a long nameParams parameter in nnmRptConfig.exe. This is a remote code execution vulnerability...

HP OpenView Network Node Manager ovutil.dll stringToSeconds Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The exploit would require a crafted HTTP request to the target host. The specific flaw...

HP OpenView Network Node Manager ovas.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The flaw exists within the ovas.exe component which listens by default on TCP port 7510...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe data_select1 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nnmRptConfig.exe module exposed by the webserver that listens by default o...

Hewlett-Packard Network Node Manager OVutil.dll Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The flaw exists within the ovutil.dll component which is loaded by the webserver listeni...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe nameParams Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the nnmRptConfig.exe module exposed by the webserver that listens by default o...

Hewlett-Packard OpenView Network Node Manager nnmRptConfig.exe Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within nnmRptConfig.exe CGI which is exposed by the webserver which listens by defaul...