what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

OSVDB: OSVDB-64975

HP OpenView Network Node Manager snmpviewer.exe Buffer Overflow

Posted Mar 24, 2011

Authored by jduck | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM_01203. By making a specially crafted HTTP request to the "snmpviewer.exe" CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary code. The vulnerable code lies within the a function within "snmpviewer.exe" with a timestamp prior to April 7th, 2010. This vulnerability is triggerable via either a GET or POST request. The request must contain 'act' and 'app' parameters which, when combined, total more than the 1024 byte stack buffer can hold.

tags | exploit, web, overflow, arbitrary, cgi

advisories | CVE-2010-1552, OSVDB-64975

SHA-256 | 941d626b048888e533b6035864853431c8dc16bff0ae357bda104698ffecbf13

Download | Favorite | View