CVE-2009-4179

HP OpenView Network Node Manager <7.53 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2009-4179. PoCs published by Metasploit, sinn3r & muts, jduck, including Metasploit module exploits/windows/http/hp_nnm_ovalarm_lang.

AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 via a crafted HTTP request with a long 'Accept-Language' header and 'OVABverbose' parameter, leading to arbitrary code execution.

Description

Stack-based buffer overflow in ovalarm.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Accept-Language header in an OVABverbose action.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16797

This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 via a crafted HTTP request with a long 'Accept-Language' header and 'OVABverbose' parameter, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP OpenView Network Node Manager 7.53
No auth needed
Prerequisites: Network access to the target · Target running HP OpenView Network Node Manager 7.53
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by sinn3r & muts · pythonremotewindows
https://www.exploit-db.com/exploits/10394

This exploit targets a buffer overflow vulnerability in HP OpenView Network Node Manager (NNM) 7.53 via the ovalarm.exe CGI. It sends a crafted HTTP request with a malicious payload to achieve remote code execution (RCE) by overwriting the EIP and executing shellcode.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP OpenView Network Node Manager 7.53
No auth needed
Prerequisites: HP NNM 7.53 installed · IIS with specific configuration (CreateProcessAsUser set to false) · Patch NNM_01187 uninstalled
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC GREAT
by jduck · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_ovalarm_lang.rb

This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 via a crafted HTTP request with a long 'Accept-Language' header and 'OVABverbose' parameter, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP OpenView Network Node Manager 7.53
No auth needed
Prerequisites: Network access to the target · HP OpenView Network Node Manager 7.53 running on the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory x_refsource_misc
http://dvlabs.tippingpoint.com/advisory/TPTI-09-12
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/54657
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37347
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/508355/100/0/threaded
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37261
Mailing List vendor-advisory x_refsource_hp
http://marc.info/?l=bugtraq&m=126046355120442&w=2
Patch, Vendor Advisory vendor-advisory x_refsource_hp
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877

Scores

EPSS 0.6697
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (3)
hp/openview_network_node_manager 7.0.1 (4 CPE variants)
hp/openview_network_node_manager 7.51 (4 CPE variants)
hp/openview_network_node_manager 7.53 (4 CPE variants)
Published Dec 10, 2009
Tracked Since Feb 18, 2026