Description
Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter to ovlogin.exe.
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-09
- 37261 vdb-entry
- SSRT090257 vendor-advisory
- hp-openviewnnm-ovsessionmgr-bo(54660) vdb-entry
- SSRT090131 vendor-advisory
- 20091209 TPTI-09-09: HP OpenView NNM ovsessionmgr.exe userid/passwd Heap Overflow Vulnerability mailing-list
- 37330 vdb-entry