| Check Point Reference: |
CPAI-2010-006 |
| Date Published: |
6 Jan 2010 |
| Severity: |
High
|
| Last Updated: |
Friday 15 January, 2010 |
| Source: |
Secunia Advisory: SA37665 |
| Industry Reference: | CVE-2009-3849 |
| Protection Provided by: |
|
| Who is Vulnerable? | Hewlett-Packard OpenView Network Node Manager (OV NNM) 7.01
Hewlett-Packard OpenView Network Node Manager (OV NNM) 7.51
Hewlett-Packard OpenView Network Node Manager (OV NNM) 7.53 |
| Vulnerability Description |
A buffer overflow vulnerability has been reported in HP OpenView Network Node Manager (NNM) CGI program snmp.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A remote attacker could exploit this vulnerability to inject and execute arbitrary code on a target server. |
| Update/Patch Avaliable | Apply patches:
HP Support Document ID: c01950877 |
| Vulnerability Details | The vulnerability is due to a boundary error in snmp.exe when parsing HTTP requests containing an overly long Oid value. To trigger this issue, a remote attacker can send a specially crafted HTTP request to the target server. Successful exploitation may allow the attacker to inject and execute arbitrary code on the target system, or cause the affected process to terminate abnormally. |
Feedback