CVE-2010-2704

Опубликовано: 28 июл. 2010

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Buffer overflow in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long HTTP request to nnmrptconfig.exe.

Ссылки

http://marc.info/?l=bugtraq&m=127972286628707&w=2
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=127974889107645&w=2
http://secunia.com/advisories/40697
Vendor Advisory
http://www.attrition.org/pipermail/vim/2010-July/002374.html
http://www.securityfocus.com/archive/1/512543/100/0/threaded
http://www.securityfocus.com/bid/41839
http://www.vupen.com/english/advisories/2010/1866
Vendor Advisory
http://marc.info/?l=bugtraq&m=127972286628707&w=2
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=127974889107645&w=2
http://secunia.com/advisories/40697
Vendor Advisory
http://www.attrition.org/pipermail/vim/2010-July/002374.html
http://www.securityfocus.com/archive/1/512543/100/0/threaded
http://www.securityfocus.com/bid/41839
http://www.vupen.com/english/advisories/2010/1866
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*

EPSS

Процентиль: 96%

0.21933

Средний

10 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-hxvc-gvxm-rjwq

github

больше 3 лет назад