PT-2010-3225 · Hewlett Packard · Hp Openview Network Node Manager

Jduck · Published 2010-05-11 · Updated 2018-10-10 · CVE-2010-1552

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53

Description The issue is related to a stack-based buffer overflow in the doLoad function in snmpviewer.exe, allowing remote attackers to execute arbitrary code. This is achieved via the act and app parameters.

Recommendations For HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53, consider restricting access to the snmpviewer.exe CGI until a patch is available. As a temporary workaround, avoid using the act and app parameters in the affected CGI endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1552

ZDI-10-083

Affected Products

Hp Openview Network Node Manager

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_snmpviewer_actapp.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17039 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1552 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-10-083 · Security Note
• http://marc.info/?l=bugtraq&m=127360750704351&w=2 · Vendor Advisory
• http://securityfocus.com/archive/1/511248/100/0/threaded · Note
• http://securityreason.com/securityalert/8157 · Note
• http://zerodayinitiative.com/advisories/ZDI-10-083 · Note