CVE-2011-0267

HP Openview Network Node Manager - Memory Corruption

Title source: rule

Description

Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/17038

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

by sinn3r · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_nnmrptconfig_schdparams.rb

View Code ZIP pw:eip

References (8)

[Third Party Advisory] http://www.zerodayinitiative.com/advisories/ZDI-11-009/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/64649

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/515628

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/45762

[Exploit, Third Party Advisory] http://www.exploit-db.com/exploits/17038

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1024951

[Third Party Advisory] http://www.vupen.com/english/advisories/2011/0085

[Third Party Advisory] http://securityreason.com/securityalert/8156

Scores

EPSS 0.7899

EPSS Percentile 99.1%

Details

CWE

CWE-119

Status published

Products (2)

hp/openview_network_node_manager 7.51

hp/openview_network_node_manager 7.53

Published Jan 13, 2011

Tracked Since Feb 18, 2026