CVE-2010-1961
HP OpenView Network Node Manager ovwebsnmpsrv.exe main Buffer Overflow
Title source: metasploitExploitation Summary
EIP tracks 2 public exploits for CVE-2010-1961.
PoCs published by Metasploit, jduck, including Metasploit module exploits/windows/http/hp_nnm_ovwebsnmpsrv_ovutil.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program, allowing arbitrary code execution. The exploit uses either GET or POST requests to trigger the vulnerability.
Description
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program, allowing arbitrary code execution. The exploit uses either GET or POST requests to trigger the vulnerability.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program, allowing arbitrary code execution. The exploit leverages SEH overwrites and JMP ESP techniques to achieve RCE.