CVE-2010-2709: Buffer Overflow
Published Aug 5, 2010
·Updated
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie.
Affected Software
10 affected components
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Remediation
Patch Available
Patch Available
Event History
Aug 5, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-2709?
CVE-2010-2709 has a high severity rating due to its capability to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2010-2709?
To mitigate CVE-2010-2709, upgrade to a patched version of HP OpenView Network Node Manager that is not vulnerable.
3
What are the affected versions of CVE-2010-2709?
CVE-2010-2709 affects HP OpenView Network Node Manager versions 7.51 and 7.53.
4
What type of attack does CVE-2010-2709 enable?
CVE-2010-2709 enables remote attackers to conduct a stack-based buffer overflow attack.
5
Is CVE-2010-2709 exploitable remotely?
Yes, CVE-2010-2709 is exploitable remotely by sending a specially crafted OvJavaLocale value in a cookie.