Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-2703.
PoCs published by Metasploit, Abysssec, including Metasploit module exploits/windows/http/hp_nnm_webappmon_execvp.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in HP NNM's webappmon.exe via a maliciously crafted POST request. The vulnerability arises from improper bounds-checking in the execvp_nc function, allowing arbitrary code execution.
Description
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.
Exploits (3)
This Metasploit module exploits a buffer overflow in HP NNM's webappmon.exe via a maliciously crafted POST request. The vulnerability arises from improper bounds-checking in the execvp_nc function, allowing arbitrary code execution.
This exploit targets a buffer overflow vulnerability in HP OpenView NNM's webappmon.exe via a maliciously crafted POST request. The PoC sends an oversized payload to trigger remote code execution.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via a long 'sel' parameter in the 'webappmon.exe' CGI program. It leverages a strcat operation to overflow adjacent buffers and overwrite the saved return address or SEH frame for arbitrary code execution.