HTTP: HP OpenView Network Node Manager nnmRptConfig.exe schd_select1 Remote Code Execution

This signature detects attempts to exploit a known vulnerability in HP OpenView Network Node Manager. It is due to insufficient validation of user-supplied input. A remote attacker can exploit this by enticing a target to open a malicious URL link. A successful attack can result in arbitrary command execution and buffer overflow.

Extended Description

HP OpenView Network Node Manager is prone to multiple remote code-execution vulnerabilities. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the user running the application's webserver. Failed exploit attempts will likely result in denial-of-service conditions. OpenView Network Node Manager 7.51 and 7.53 are vulnerable.

Affected Products

Hp openview_network_node_manager

References

BugTraq: 45762

CVE: CVE-2011-0266

URL: http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c02670501 http://www.zerodayinitiative.com/advisories/zdi-11-011/ http://www.zerodayinitiative.com/advisories/zdi-11-010/

Short Name

HTTP:NNMRPTCONFIG-EXE-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: HP OpenView Network Node Manager nnmRptConfig.exe schd_select1 Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?