Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-3167.
PoCs published by Metasploit, including Metasploit module exploits/windows/http/hp_nnm_ovbuildpath_textfile.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via the 'webappmon.exe' CGI program. It leverages directory traversal to retrieve the installation path and uses an egghunter for reliable exploitation.
Description
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager 7.53 via the 'webappmon.exe' CGI program. It leverages directory traversal to retrieve the installation path and uses an egghunter for reliable exploitation.
This Metasploit module exploits a stack-based buffer overflow in HP OpenView Network Node Manager via a long 'textFile' argument in the 'webappmon.exe' CGI program. It uses an egghunter and directory traversal to retrieve the installation path for reliable exploitation.