CVE-2011-0267
HP OpenView Network Node Manager 7.51, 7.53 - Remote Code Execution via Long schdParams or nameParams
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-0267.
PoCs published by Metasploit, sinn3r, including Metasploit module exploits/windows/http/hp_nnm_nnmrptconfig_schdparams.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView NNM's nnmRptConfig.exe via a malformed POST request to the OvCgi endpoint. The exploit leverages SEH overwrites and a JMP ECX instruction to achieve arbitrary code execution.
Description
Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView NNM's nnmRptConfig.exe via a malformed POST request to the OvCgi endpoint. The exploit leverages SEH overwrites and a JMP ECX instruction to achieve arbitrary code execution.
This Metasploit module exploits a buffer overflow in HP OpenView NNM's nnmRptConfig.exe via a maliciously crafted POST request, leading to arbitrary code execution. The exploit leverages SEH overwrites and a JMP ECX instruction to redirect execution to the payload.