Description
Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.
References (3)
Core 3
Core References
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=127360750704351&w=2
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/511245/100/0/threaded
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-10-081/
Scores
EPSS
0.1177
EPSS Percentile
95.5%
Details
CWE
CWE-134
Status
published
Products (3)
hp/openview_network_node_manager
7.0.1
hp/openview_network_node_manager
7.51 (5 CPE variants)
hp/openview_network_node_manager
7.53 (5 CPE variants)
Published
May 13, 2010
Tracked Since
Feb 18, 2026