CVE-2010-2709: Buffer Overflow
First published: Thu Aug 05 2010(Updated: )
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.53 | |
| HP OpenView Network Node Manager | =7.53 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://seclists.org/bugtraq/2010/Aug/21
- http://www.coresecurity.com/content/hp-nnm-ovjavalocale-buffer-overflow
- http://www.exploit-db.com/exploits/14547
- http://securitytracker.com/id?1024274
- http://www.securityfocus.com/bid/42154
- http://securityreason.com/securityalert/8150
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60880
Frequently Asked Questions
What is the severity of CVE-2010-2709?
CVE-2010-2709 has a high severity rating due to its capability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2010-2709?
To mitigate CVE-2010-2709, upgrade to a patched version of HP OpenView Network Node Manager that is not vulnerable.
What are the affected versions of CVE-2010-2709?
CVE-2010-2709 affects HP OpenView Network Node Manager versions 7.51 and 7.53.
What type of attack does CVE-2010-2709 enable?
CVE-2010-2709 enables remote attackers to conduct a stack-based buffer overflow attack.
Is CVE-2010-2709 exploitable remotely?
Yes, CVE-2010-2709 is exploitable remotely by sending a specially crafted OvJavaLocale value in a cookie.
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/7.51
- version/hp openview network node manager/7.53