Buffer overflow in Hp Openview_network_node_manager

CVE-2010-2704

Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe.

Vulnerability class: Buffer Overflow

EPSS: 0.219 (95.9th percentile) — read the EPSS interpretation.

Affected products

Hp Openview_network_node_manager — versions 7.53, 7.51
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

ADV-2010-1866 (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
HPSBMA02558 (Vendor Advisory, x_refsource_HP, vendor-advisory, Patch)
41839 (vdb-entry, x_refsource_BID)
SSRT100158 (x_refsource_HP, vendor-advisory)
20100727 CVE number confusion in HP OV NNM products (mailing-list, x_refsource_VIM)
40697 (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
20100721 VUPEN Security Research - HP OpenView Network Node Manager "nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703) (mailing-list, x_refsource_BUGTRAQ)