Test ID:	1.3.6.1.4.1.25623.1.0.801388
Category:	Web application abuses
Title:	HP OpenView Network Node Manager Multiple Code Execution Vulnerabilities
Summary:	HP OpenView Network Node Manager is prone to multiple code execution vulnerabilities.
Description:	Summary: HP OpenView Network Node Manager is prone to multiple code execution vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - A buffer overflow error in 'CGI' executable when processing an overly long parameter value. - A buffer overflow error in the 'ov.dll' library when processing certain arguments supplied via CGI executables. - An error in 'webappmon.exe' CGI application, which fails to adequately validate user-supplied input. Vulnerability Impact: Successful exploitation will allow attacker to execute arbitrary code in the context of an application. Affected Software/OS: HP OpenView Network Node Manager 7.51 and 7.53 Solution: Upgrade to NNM v7.53 and apply the patch from the linked references. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2704 BugTraq ID: 41839 http://www.securityfocus.com/bid/41839 Bugtraq: 20100721 VUPEN Security Research - HP OpenView Network Node Manager "nnmrptconfig.exe" Buffer Overflow (CVE-2010-2703) (Google Search) http://www.securityfocus.com/archive/1/512543/100/0/threaded HPdes Security Advisory: HPSBMA02558 http://marc.info/?l=bugtraq&m=127972286628707&w=2 HPdes Security Advisory: SSRT010158 HPdes Security Advisory: SSRT100158 http://marc.info/?l=bugtraq&m=127974889107645&w=2 http://secunia.com/advisories/40697 http://www.attrition.org/pipermail/vim/2010-July/002374.html http://www.vupen.com/english/advisories/2010/1866 Common Vulnerability Exposure (CVE) ID: CVE-2010-2709 BugTraq ID: 42154 http://www.securityfocus.com/bid/42154 http://www.exploit-db.com/exploits/14547 HPdes Security Advisory: HPSBMA02563 http://seclists.org/bugtraq/2010/Aug/21 HPdes Security Advisory: SSRT100165 http://www.coresecurity.com/content/hp-nnm-ovjavalocale-buffer-overflow http://securitytracker.com/id?1024274 http://securityreason.com/securityalert/8150 XForce ISS Database: hp-ovnnm-ovjavalocale-bo(60880) https://exchange.xforce.ibmcloud.com/vulnerabilities/60880
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.