Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-1554.
PoCs published by Metasploit, S2 Crew, MC, including Metasploit module exploits/windows/http/hp_nnm_getnnmdata_icount.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in HP OpenView Network Node Manager via a malformed ICount parameter in a POST request to getnnmdata.exe. It uses SEH overwrites and alphanumeric shellcode to achieve remote code execution.
Description
Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.
Exploits (3)
This Metasploit module exploits a buffer overflow in HP OpenView Network Node Manager via a malformed ICount parameter in a POST request to getnnmdata.exe. It uses SEH overwrites and alphanumeric shellcode to achieve remote code execution.
This exploit targets a buffer overflow in HP OpenView NNM's getnnmdata.exe CGI via a malformed ICount parameter. It uses an egghunter and shellcode to execute calc.exe, demonstrating remote code execution.
This Metasploit module exploits a buffer overflow in HP OpenView Network Node Manager via a malformed ICount parameter in a POST request to getnnmdata.exe. It uses SEH overwrites and alphanumeric shellcode to achieve remote code execution.