Hewlett Packard · Hp Openview Network Node Manager · CVE-2010-1553
**Name of the Vulnerable Software and Affected Versions**
HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53
**Description**
The issue is related to a stack-based buffer overflow in the getnnmdata.exe component. This occurs when an invalid `MaxAge` parameter is provided, allowing remote attackers to execute arbitrary code.
**Recommendations**
For HP OpenView Network Node Manager version 7.01, update to a version that fixes the issue.
For HP OpenView Network Node Manager version 7.51, update to a version that fixes the issue.
For HP OpenView Network Node Manager version 7.53, update to a version that fixes the issue.
As a temporary workaround, consider restricting access to the getnnmdata.exe component to minimize the risk of exploitation. Avoid using an invalid `MaxAge` parameter in the affected CGI endpoint until the issue is resolved.