PT-2011-2235 · Hewlett Packard · Hp Openview Network Node Manager

Publicado 2011-01-10 · Atualizado 2017-08-17 · CVE-2011-0261

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53

Description The issue allows remote attackers to execute arbitrary code via a malformed displayWidth option in the arg parameter. This is related to an unspecified vulnerability in jovgraph.exe in HP OpenView Network Node Manager.

Recommendations For versions 7.51 and 7.53, consider restricting access to the jovgraph.exe component to minimize the risk of exploitation until a fix is available. Avoid using the displayWidth option in the arg parameter for the affected jovgraph.exe until the issue is resolved.

Correção

Identificadores relacionados

CVE-2011-0261

ZDI-11-003

Produtos afetados

Hp Openview Network Node Manager

Referências · 8

• http://zerodayinitiative.com/advisories/ZDI-11-003 · Nota
• http://securityfocus.com/bid/45762 · Nota
• http://securitytracker.com/id?1024951 · Nota
• http://vupen.com/english/advisories/2011/0085 · Nota
• https://zerodayinitiative.com/advisories/ZDI-11-003 · Nota de Segurança
• http://securityfocus.com/archive/1/515628 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0261 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64655 · Nota