| Vulnerability Name: | CVE-2010-2703 (CCN-60555) | ||||||||
| Assigned: | 2010-07-21 | ||||||||
| Published: | 2010-07-21 | ||||||||
| Updated: | 2018-10-10 | ||||||||
| Summary: | Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe. | ||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-119 | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2010-2703 Source: CCN Type: HP Security Bulletin HPSBMA02557 SSRT100025 OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code Source: HP Type: Patch, Vendor Advisory SSRT100025 Source: OSVDB Type: UNKNOWN 66514 Source: CCN Type: SA40686 HP OpenView Network Node Manager execvp_nc() Buffer Overflow Source: SECUNIA Type: Vendor Advisory 40686 Source: SREASON Type: UNKNOWN 8161 Source: CCN Type: SECTRACK ID: 1024224 HP OpenView Network Node Manager Buffer Overflow in 'ov.dll' Lets Remote Users Execute Arbitary Code Source: CCN Type: SECTRACK ID: 1024238 HP OpenView Network Node Manager Buffer Overflow in 'nnmrptconfig.exe' Lets Remote Users Execute Arbitrary Code Source: VIM Type: UNKNOWN 20100727 CVE number confusion in HP OV NNM products Source: EXPLOIT-DB Type: UNKNOWN 14916 Source: CCN Type: OSVDB ID: 66514 HP OpenView Network Node Manager ov.dll execvp_nc() Function Overflow Source: BUGTRAQ Type: UNKNOWN 20100721 VUPEN Security Research - HP OpenView Network Node Manager "ov.dll" Buffer Overflow Vulnerability (CVE-2010-2704) Source: BUGTRAQ Type: UNKNOWN 20100721 ZDI-10-137: Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability Source: BID Type: UNKNOWN 41829 Source: CCN Type: BID-41829 HP OpenView Network Node Manager 'execvp_nc()' Code Execution Vulnerability Source: SECTRACK Type: UNKNOWN 1024224 Source: SECTRACK Type: UNKNOWN 1024238 Source: VUPEN Type: Vendor Advisory ADV-2010-1866 Source: XF Type: UNKNOWN hp-ovnnm-execvpnc-bo(60555) Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [09-06-2010] Source: EXPLOIT-DB Type: EXPLOIT Offensive Security Exploit Database [03-23-2011] Source: CCN Type: ZDI-10-137 Hewlett-Packard OpenView NNM webappmon.exe execvp_nc Remote Code Execution Vulnerability | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||