HTTP: HP OpenView Network Node Manager Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the HP OpenView Network Node Manager (NNM). A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the system.

Extended Description

HP OpenView Network Node Manager is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to insufficiently sized buffers. Successfully exploiting these issues may allow an attacker to execute arbitrary code with the privileges of the user running the affected application. Failed exploit attempts will likely crash the application. These issues affect HP OpenView Network Node Manager 7.51 with NNM_01168; other versions may also be affected.

Affected Products

Hp openview_network_node_manager

References

BugTraq: 37347 37261 34134 33147 34294 26741

CVE: CVE-2008-0067

URL: http://dvlabs.tippingpoint.com/advisory/TPTI-09-12 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877 http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01696729 http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01950877 http://dvlabs.tippingpoint.com/advisory/tpti-09-12 http://h20000.www2.hp.com/bizsupport/techsupport/document.jsp?objectid=c01188923 http://www.zerodayinitiative.com/advisories/zdi-07-071.html

Short Name

HTTP:OVERFLOW:OPENVIEW-NNM-BO

Severity

Critical

Recommended

False

Recommended Action

Drop

HTTP: HP OpenView Network Node Manager Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?