CVE-2010-2703

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• HP Network Node Manager (NMM) - CGI 'webappmon.exe execvp' Remote Buffer Overflow (Metasploit)2011-03-23 · remote · windows · Verified
• HP OpenView Network Node Manager (OV NNM) - 'webappmon.exe execvp_nc' Remote Code Execution2010-09-06 · dos · windows · Verified

Impact

Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=127973001009749&w=2
• http://osvdb.org/66514
• http://secunia.com/advisories/40686
• http://securityreason.com/securityalert/8161
• http://www.attrition.org/pipermail/vim/2010-July/002374.html
• http://www.exploit-db.com/exploits/14916
• http://www.securityfocus.com/archive/1/512544/100/0/threaded
• http://www.securityfocus.com/archive/1/512552/100/0/threaded
• http://www.securityfocus.com/bid/41829
• http://www.securitytracker.com/id?1024224
• http://www.securitytracker.com/id?1024238
• http://www.vupen.com/english/advisories/2010/1866
• http://marc.info/?l=bugtraq&m=127973001009749&w=2
• http://osvdb.org/66514
• http://secunia.com/advisories/40686
• http://securityreason.com/securityalert/8161
• http://www.attrition.org/pipermail/vim/2010-July/002374.html
• http://www.exploit-db.com/exploits/14916
• http://www.securityfocus.com/archive/1/512544/100/0/threaded
• http://www.securityfocus.com/archive/1/512552/100/0/threaded
• http://www.securityfocus.com/bid/41829
• http://www.securitytracker.com/id?1024224
• http://www.securitytracker.com/id?1024238
• http://www.vupen.com/english/advisories/2010/1866