CVE-2010-1964
HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflow
Title source: metasploitExploitation Summary
EIP tracks 3 public exploits for CVE-2010-1964.
PoCs published by Metasploit, bitform, jduck, including Metasploit module exploits/windows/http/hp_nnm_ovwebsnmpsrv_main.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program. It achieves arbitrary code execution by overwriting SEH structures, with support for both GET and POST requests.
Description
Buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified parameters to jovgraph.exe, aka ZDI-CAN-683.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program. It achieves arbitrary code execution by overwriting SEH structures, with support for both GET and POST requests.
This exploit demonstrates a buffer overflow in HP NNM 7.53's ovwebsnmpsrv.exe via the -dump command-line argument, overwriting SEH to execute an alphanumeric bind shell. The PoC includes a crafted payload to carve EAX and trigger the shellcode.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'arg' parameter in the 'jovgraph.exe' CGI program, allowing arbitrary code execution by overwriting SEH structures.