Description
Stack-based buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Template parameter, related to the vsprintf function.
References
- hpovnnm-vsprintf-bo(54653) vdb-entry
- 37296 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-09-096/
- 37261 vdb-entry
- SSRT090257 vendor-advisory
- 20091209 ZDI-09-096: Hewlett-Packard OpenView NNM nnmRptConfig.exe Template Variable vsprintf Overflow Vulnerability mailing-list
- SSRT090129 vendor-advisory