critical10.0Public exploit code
CVE-2009-4178
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Buffer Overflow (Metasploit)2010-11-11 · remote · windows · Verified
- HP OpenView Network Node Manager (OV NNM) - 'OvWebHelp.exe' CGI Topic Overflow2010-03-30 · remote · windows
Impact
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Openview Network Node Manager | Versions 7.0.1, 7.51, 7.53 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-11
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
- http://marc.info/?l=bugtraq&m=126046355120442&w=2
- http://www.securityfocus.com/archive/1/508354/100/0/threaded
- http://www.securityfocus.com/bid/37261
- http://www.securityfocus.com/bid/37340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54659
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-11
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
- http://marc.info/?l=bugtraq&m=126046355120442&w=2
- http://www.securityfocus.com/archive/1/508354/100/0/threaded
- http://www.securityfocus.com/bid/37261
- http://www.securityfocus.com/bid/37340
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54659