Unscored CVE-2010-1550 EUVD-2010-1577GHSA-c2xv-cj4r-rwv7

Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attacker…

Published May 13, 2010 · Updated Aug 7, 2024 · Assigned by hp

Description

Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.

References

SSRT010098 vendor-advisory
20100511 ZDI-10-081: HP OpenView NNM ovet_demandpoll sel CGI Variable Format String Remote Code Execution Vulnerability mailing-list
http://zerodayinitiative.com/advisories/ZDI-10-081/