Description
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.
References
- hp-openviewnnm-ovlogin-bo(54658) vdb-entry
- 20091209 TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability mailing-list
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-08
- 37261 vdb-entry
- SSRT090257 vendor-advisory
- 37295 vdb-entry
- HPSBMA02483 vendor-advisory