CVE-2010-1964

This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program. It achieves arbitrary code execution by overwriting SEH structures, with support for both GET and POST requests.

This exploit demonstrates a buffer overflow in HP NNM 7.53's ovwebsnmpsrv.exe via the -dump command-line argument, overwriting SEH to execute an alphanumeric bind shell. The PoC includes a crafted payload to carve EAX and trigger the shellcode.

This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program, allowing arbitrary code execution by overwriting SEH structures.