Unscored severity · published Apr 21, 2010
CVE-2010-1033
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code…
–
CVSS
12.4%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and srcvw4.dll.
Exploitation
Is it being used?
Exploit prediction (EPSS)12.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Operations Manager · HP
7.5; 8.10; 8.16 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1033
Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02078800
URL Repurposed
http://net-ninja.net/blog/media/blogs/b/exploits/hpoperationsmngr.html.txt
Vendor Advisory
http://secunia.com/advisories/39538
securitytracker.com
http://securitytracker.com/id?1023894
www.corelan.be
http://www.corelan.be:8800/advisories.php?id=CORELAN-10-027
www.corelan.be
http://www.corelan.be:8800/wp-content/forum-file-uploads/mr_me/hpoperationsmngr.html.txt
More from Operations Manager
10.0
CVE-2016-1985
HPE Operations Manager 8.x and 9.0 on Windows allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections…
9.8
CVE-2016-4373
The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object,…
5.4
CVE-2016-4380
Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML…
–
CVE-2014-2649
Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors
–
CVE-2014-2648
Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors