CVE-2010-2709

HP OpenView Network Node Manager <7.53 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 3 public exploits for CVE-2010-2709. PoCs published by Metasploit, Nahuel Riva, Nahuel Riva, sinn3r, jduck, including Metasploit module exploits/windows/http/hp_nnm_webappmon_ovjavalocale.

AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP NNM's webappmon.exe via a maliciously crafted OvJavaLocale cookie. The exploit leverages a long string to overflow the buffer in OvWwwDebug() when sprintf_new() is called, leading to arbitrary code execution.

Description

Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17029

This Metasploit module exploits a stack-based buffer overflow in HP NNM's webappmon.exe via a maliciously crafted OvJavaLocale cookie. The exploit leverages a long string to overflow the buffer in OvWwwDebug() when sprintf_new() is called, leading to arbitrary code execution.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP Network Node Manager (NNM) webappmon.exe
No auth needed
Prerequisites: Network access to the target HP NNM server · Target server running vulnerable version of HP NNM
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WORKING POC VERIFIED
by Nahuel Riva · textwebappswindows
https://www.exploit-db.com/exploits/14547

The exploit demonstrates a buffer overflow in HP OpenView NNM's webappmon.exe CGI application via a maliciously crafted OvJavaLocale cookie header. It includes a Python script to trigger the vulnerability by sending an HTTP request with an oversized cookie value.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: HP OpenView NNM v7.53
No auth needed
Prerequisites: Network access to the target system · HP OpenView NNM with vulnerable webappmon.exe CGI
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC GREAT
by Nahuel Riva, sinn3r, jduck · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_webappmon_ovjavalocale.rb

This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 via a maliciously crafted cookie. The vulnerability allows arbitrary code execution by overflowing a static stack buffer in the OvWwwDebug function.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: HP OpenView Network Node Manager 7.53
No auth needed
Prerequisites: Network access to the vulnerable HP NNM web interface
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60880
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14547
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8150
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024274
Patch, Vendor Advisory vendor-advisory x_refsource_hp
http://seclists.org/bugtraq/2010/Aug/21
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/42154

Scores

EPSS 0.4226
EPSS Percentile 98.5%

Details

CWE
CWE-119
Status published
Products (2)
hp/openview_network_node_manager 7.51 (5 CPE variants)
hp/openview_network_node_manager 7.53 (5 CPE variants)
Published Aug 05, 2010
Tracked Since Feb 18, 2026