Unscored severity · published Jun 10, 2010
CVE-2010-1961
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified…
–
CVSS
67.3%
EPSS
No
On KEV
Description
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.
Exploitation
Is it being used?
Exploit prediction (EPSS)67.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
7.51; 7.51; 7.51; 7.51; 7.51; 7.53; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1961
Patch
http://marc.info/?l=bugtraq&m=127602909915281&w=2
Vendor Advisory
http://secunia.com/advisories/40101
www.securityfocus.com
http://www.securityfocus.com/archive/1/511731/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/40638
www.securitytracker.com
http://www.securitytracker.com/id?1024071
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-10-106/
More from Openview Network Node Manager
9.8
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…