CVE-2011-0270
First published: Thu Jan 13 2011(Updated: )
Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name.
Credit: hp-security-alert@hp.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-11-012/
- http://www.securityfocus.com/archive/1/515628
- http://www.securitytracker.com/id?1024951
- http://www.securityfocus.com/bid/45762
- http://www.vupen.com/english/advisories/2011/0085
- http://osvdb.org/70474
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64646
Frequently Asked Questions
What is the severity of CVE-2011-0270?
CVE-2011-0270 is rated as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2011-0270?
To mitigate CVE-2011-0270, upgrade HP OpenView Network Node Manager to versions 7.54 or later, which are not affected.
What systems are affected by CVE-2011-0270?
CVE-2011-0270 affects HP OpenView Network Node Manager versions 7.51 and 7.53.
Can CVE-2011-0270 be exploited remotely?
Yes, CVE-2011-0270 can be exploited remotely through crafted input data that includes malicious format string specifiers.
What types of attacks can CVE-2011-0270 lead to?
Exploitation of CVE-2011-0270 can lead to arbitrary code execution, potentially compromising system integrity and confidentiality.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/7.51
- version/hp openview network node manager/7.53