Check Point Advisories

HP Network Node Manager I ovopi.dll Buffer Overflow (CVE-2014-2624)

Check Point Reference: CPAI-2014-1855
Date Published: 14 Oct 2014
Severity: Critical
Last Updated: Tuesday 14 October, 2014
Source: HP
Industry Reference:CVE-2014-2624
Protection Provided by:

Security Gateway
R77

  • R76
  • R75

    		•
    Who is Vulnerable?
    HP Network Node Manager i (NNMi) 9.0x
    HP Network Node Manager i (NNMi) 9.1x
    HP Network Node Manager i (NNMi) 9.2x
    Vulnerability Description Multiple buffer overflow vulnerabilities exist in HP Network Node Manager I (NNMi). These vulnerabilities are caused by copying user supplied data into stack-based buffers without sufficient validation in ovopi.dll. By sending a crafted request to the vulnerable product on port 696/UDP, a remote unauthenticated attacker could exploit these vulnerabilities to execute arbitrary code with system privileges.

    Protection Overview

    Security Gateway R77 / R76 / R75 / R71 / R70

    1. In the IPS tab, click Protections and find the HP Network Node Manager I ovopi.dll Buffer Overflow protection using the Search tool and Edit the protection's settings.
    2. Install policy on all modules.

    SmartView Tracker will log the following entries:

    Attack Name: HP Products Protection Violation.
    Attack Information: HP Network Node Manager I ovopi.dll Buffer Overflow

    ×
      Feedback
    This website uses cookies for its functionality and for analytics and marketing purposes. By continuing to use this website, you agree to the use of cookies. For more information, please read our Cookies Notice.
    OK