CVE-2010-1961: Buffer Overflow
First published: Thu Jun 10 2010(Updated: )
Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/40638
- http://www.zerodayinitiative.com/advisories/ZDI-10-106/
- http://marc.info/?l=bugtraq&m=127602909915281&w=2
- http://www.securitytracker.com/id?1024071
- http://secunia.com/advisories/40101
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59250
- http://www.securityfocus.com/archive/1/511731/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2010-1961?
CVE-2010-1961 is considered a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2010-1961?
To fix CVE-2010-1961, upgrade to a patched version of HP OpenView Network Node Manager that addresses the buffer overflow issue.
Which versions of HP OpenView Network Node Manager are affected by CVE-2010-1961?
CVE-2010-1961 affects HP OpenView Network Node Manager versions 7.51 and 7.53 on Solaris, Windows, HP-UX, and Linux.
What types of attacks are possible with CVE-2010-1961?
Attackers can exploit CVE-2010-1961 to execute arbitrary code remotely on affected systems.
Is there a workaround for CVE-2010-1961?
While upgrading to a secure version is recommended, temporarily restricting access to vulnerable components can act as a workaround for CVE-2010-1961.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/7.53
- version/hp openview network node manager/7.51