CVE-2010-1960
HP OpenView Network Node Manager 7.51 and 7.53 - Remote Code Execution via Long Invalid Option to jovgraph.exe
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1960.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/http/hp_nnm_ovwebsnmpsrv_uro.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in a POST request to 'jovgraph.exe'. It leverages SEH overwriting and a restrictive character set to achieve arbitrary code execution.
Description
Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in a POST request to 'jovgraph.exe'. It leverages SEH overwriting and a restrictive character set to achieve arbitrary code execution.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in a POST request to 'jovgraph.exe'. It leverages SEH overwriting and a double-backward jump with Alpha2 encoding to achieve remote code execution.