CVE-2009-4179

HP OpenView Network Node Manager <7.53 - Buffer Overflow

Title source: llm

Description

Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.

Exploits (3)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16797

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by sinn3r & muts · pythonremotewindows

https://www.exploit-db.com/exploits/10394

View Code ZIP pw:eip

metasploit WORKING POC GREAT

by jduck · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_ovalarm_lang.rb

View Code ZIP pw:eip

References (7)

[Patch, Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877

[Mailing List] http://marc.info/?l=bugtraq&m=126046355120442&w=2

[Patch] http://www.securityfocus.com/bid/37261

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/54657

[Vendor Advisory] http://dvlabs.tippingpoint.com/advisory/TPTI-09-12

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/508355/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/37347

Scores

EPSS 0.7753

EPSS Percentile 99.0%

Details

CWE

CWE-119

Status published

Products (3)

hp/openview_network_node_manager 7.0.1 (4 CPE variants)

hp/openview_network_node_manager 7.51 (4 CPE variants)

hp/openview_network_node_manager 7.53 (4 CPE variants)

Published Dec 10, 2009

Tracked Since Feb 18, 2026