PT-2011-2237

CVE-2011-0263

·

Published

2011-01-10

·

Updated

2017-08-17

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53
Description The issue is related to multiple stack-based buffer overflows in the ovas.exe component of the OVAS service. This allows remote attackers to execute arbitrary code by providing a long value for either the Source Node or Destination Node variable.
Recommendations For HP OpenView Network Node Manager versions 7.51 through 7.53, consider restricting access to the ovas.exe component until a patch is available. As a temporary workaround, avoid using long values for the Source Node or Destination Node variables in the affected service.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ZDI-11-005
Found an issue in the description? Have something to add? Feel free to write us 👾