CVE-2010-1554

Public PoC / Exploit (3)

Exploit-DBHP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe ICount' CGI Buffer Overflow (Metasploit)Exploit-DBHP OpenView Network Node Manager (OV NNM) - 'getnnmdata.exe' CGI Invalid ICount Remote Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.

Weaknesses (CWE)

CWE-119

Affected Products (11)

hp · openview_network_node_managervulnerable

References (10)

http://marc.info/?l=bugtraq&m=127360750704351&w=2

http://securityreason.com/securityalert/8154

http://www.exploit-db.com/exploits/14181

http://www.securityfocus.com/archive/1/511249/100/0/threaded

http://zerodayinitiative.com/advisories/ZDI-10-085/

http://marc.info/?l=bugtraq&m=127360750704351&w=2

http://securityreason.com/securityalert/8154

http://www.exploit-db.com/exploits/14181

http://www.securityfocus.com/archive/1/511249/100/0/threaded

http://zerodayinitiative.com/advisories/ZDI-10-085/