| Check Point Reference: |
CPAI-2010-005 |
| Date Published: |
6 Jan 2010 |
| Severity: |
High
|
| Last Updated: |
Friday 15 January, 2010 |
| Source: |
Secunia Advisory: SA37665 |
| Industry Reference: | CVE-2009-3848 |
| Protection Provided by: |
|
| Who is Vulnerable? | HP OpenView Network Node Manager (OV NNM) 7.01
HP OpenView Network Node Manager (OV NNM) 7.51
HP OpenView Network Node Manager (OV NNM) 7.53 |
| Vulnerability Description |
A stack buffer overflow vulnerability has been reported in HP OpenView Network Node Manager (NNM) CGI program nnmRptConfig.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A remote attacker could exploit this vulnerability to inject and execute arbitrary code on a target server. |
| Update/Patch Avaliable | Apply patches:
HP Support Document ID: c01950877 |
| Vulnerability Details | The vulnerability is due to a boundary error in nnmRptConfig.exe when processing the Template variable sent in a crafted HTTP request. To trigger this issue, a remote attacker can send a specially crafted HTTP request to the target server. Successful exploitation may allow the attacker to inject and execute arbitrary code on the target system, or cause the affected process to terminate abnormally. |
Feedback