Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-1552.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/http/hp_nnm_snmpviewer_actapp.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager's snmpviewer.exe via crafted HTTP requests with oversized 'act' and 'app' parameters, leading to arbitrary code execution by overwriting SEH.
Description
Stack-based buffer overflow in the doLoad function in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the act and app parameters.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager's snmpviewer.exe via crafted HTTP requests with oversized 'act' and 'app' parameters, leading to arbitrary code execution by overwriting SEH.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a crafted HTTP request to snmpviewer.exe. It leverages SEH overwrites to achieve remote code execution.