critical10.0Public exploit code
CVE-2010-1554
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe ICount' CGI Buffer Overflow (Metasploit)2011-03-24 · remote · windows · Verified
- HP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' CGI Invalid ICount Remote Code Execution2010-07-02 · remote · windows · Verified
Impact
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Openview Network Node Manager | Versions 7.0.1, 7.51, 7.53 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://securityreason.com/securityalert/8154
- http://www.exploit-db.com/exploits/14181
- http://www.securityfocus.com/archive/1/511249/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-10-085/
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://securityreason.com/securityalert/8154
- http://www.exploit-db.com/exploits/14181
- http://www.securityfocus.com/archive/1/511249/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-10-085/