Exploitation Summary
EIP tracks 3 public exploits for CVE-2010-2709.
PoCs published by Metasploit, Nahuel Riva, Nahuel Riva, sinn3r, jduck, including Metasploit module exploits/windows/http/hp_nnm_webappmon_ovjavalocale.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP NNM's webappmon.exe via a maliciously crafted OvJavaLocale cookie. The exploit leverages a long string to overflow the buffer in OvWwwDebug() when sprintf_new() is called, leading to arbitrary code execution.
Description
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in HP NNM's webappmon.exe via a maliciously crafted OvJavaLocale cookie. The exploit leverages a long string to overflow the buffer in OvWwwDebug() when sprintf_new() is called, leading to arbitrary code execution.
The exploit demonstrates a buffer overflow in HP OpenView NNM's webappmon.exe CGI application via a maliciously crafted OvJavaLocale cookie header. It includes a Python script to trigger the vulnerability by sending an HTTP request with an oversized cookie value.
This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 via a maliciously crafted cookie. The vulnerability allows arbitrary code execution by overflowing a static stack buffer in the OvWwwDebug function.