CVE-2008-0067
HP OpenView Network Node Manager 7.01, 7.51, 7.53 - Remote Code Execution via Long String Parameters
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-0067.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/http/hp_nnm_toolbar_01.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50 via a crafted CGI request to Toolbar.exe. It sends a long string to overflow the buffer and execute arbitrary code via a return address overwrite.
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50 via a crafted CGI request to Toolbar.exe. It sends a long string to overflow the buffer and execute arbitrary code via a return address overwrite.
This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50 via a crafted CGI request to Toolbar.exe, allowing arbitrary code execution. It uses a known return address (0x5a01d78d) and avoids bad characters to deliver a payload.