HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
BID:34738
Info
HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
| Bugtraq ID: | 34738 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-2438 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 27 2009 12:00AM |
| Updated: | Jan 05 2011 09:22PM |
| Credit: | Dyon Balding, Secunia Research |
| Vulnerable: |
HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.01 |
| Not Vulnerable: | |
Discussion
HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
HP OpenView Network Node Manager (NNM) is prone to a remote code-execution vulnerability caused by an integer-overflow error.
Successfully exploiting this issue allows an attacker to execute arbitrary code with the privileges of the user running the affected application.
This issue affects NNM 7.01, 7.51, and 7.53.
HP OpenView Network Node Manager (NNM) is prone to a remote code-execution vulnerability caused by an integer-overflow error.
Successfully exploiting this issue allows an attacker to execute arbitrary code with the privileges of the user running the affected application.
This issue affects NNM 7.01, 7.51, and 7.53.
Exploit / POC
HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
Solution:
Vendor updates are available. Please see the referenced advisory for details.
HP OpenView Network Node Manager 7.53
HP OpenView Network Node Manager 7.01
Solution:
Vendor updates are available. Please see the referenced advisory for details.
HP OpenView Network Node Manager 7.53
-
HP PHSS_39246
HP-UX (IA)
http://support.openview.hp.com/selfsolve/patches -
HP PHSS_39245
HP-UX (PA)
http://support.openview.hp.com/selfsolve/patches -
HP LXOV_00094
Linux RedHat4AS-x86_64
http://support.openview.hp.com/selfsolve/patches -
HP PSOV_03519
Solaris
http://support.openview.hp.com/selfsolve/patches -
HP LXOV_00093
Linux RedHatAS2.1
http://support.openview.hp.com/selfsolve/patches -
HP NNM_01197
Windows
http://support.openview.hp.com/selfsolve/patches
HP OpenView Network Node Manager 7.01
-
HP SSRT080125.701_IP12.hotfix.tar.gz
Windows
ftp://ss080125:[email protected]
References
HP OpenView Network Node Manager 'ovalarmsrv.exe' Remote Code Execution Vulnerability
References:
References:
- HP OpenView Network Node Manager ovalarmsrv Integer Overflow (Secunia)
- HP OpenView Network Node Manager Product Page (HP)
- HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote ([email protected])
- Secunia Research: HP OpenView Network Node Manager 'ovalarmsrv' Integer Overflow (Secunia Research