Heap overflow

Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or 2 a long Accept-Language HTTP header,...

CVE-2009-0920

CVE-2009-0920 affects HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, 7.53. It is a stack-based buffer overflow in Toolbar.exe triggered by a crafted OvOSLocale cookie, enabling remote code execution. Public materials (Metasploit exploits and CIRCL sightings) confirm vulnerable builds inclu...

CVE-2009-0920: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067...

CVE-2009-0921: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via 1 a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or 2 a long Accept-Language HTTP header,...