CVE-2010-1961

HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflow

Title source: metasploit

Description

Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/17044

View Code ZIP pw:eip

metasploit WORKING POC GREAT

by jduck · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_ovwebsnmpsrv_ovutil.rb

View Code ZIP pw:eip

References (7)

[Patch, Vendor Advisory] http://marc.info/?l=bugtraq&m=127602909915281&w=2

[Third Party Advisory] http://www.zerodayinitiative.com/advisories/ZDI-10-106/

[Vendor Advisory] http://secunia.com/advisories/40101

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/59250

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/40638

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/511731/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1024071

Scores

EPSS 0.6925

EPSS Percentile 98.7%

Details

CWE

CWE-119

Status published

Products (2)

hp/openview_network_node_manager 7.51 (5 CPE variants)

hp/openview_network_node_manager 7.53 (5 CPE variants)

Published Jun 10, 2010

Tracked Since Feb 18, 2026