HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
BID:35267
Info
HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 35267 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-1420 CVE-2009-2298 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2009 12:00AM |
| Updated: | Jul 09 2009 09:46PM |
| Credit: | Hewlett-Packard Company, HP Software Security Response Team |
| Vulnerable: |
HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 |
| Not Vulnerable: | |
Discussion
HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
HP OpenView Network Node Manager (NNM) is prone to a remote stack-based buffer-overflow vulnerability due to a failure to properly bounds check user-supplied input.
Successfully exploiting this issue allows a remote attacker to execute arbitrary code with kernel-level privileges.
This issue affects NNM 7.51 and 7.53.
HP OpenView Network Node Manager (NNM) is prone to a remote stack-based buffer-overflow vulnerability due to a failure to properly bounds check user-supplied input.
Successfully exploiting this issue allows a remote attacker to execute arbitrary code with kernel-level privileges.
This issue affects NNM 7.51 and 7.53.
Exploit / POC
HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
Solution:
Vendor updates are available. Please see the referenced advisory for details.
HP OpenView Network Node Manager 7.53
Solution:
Vendor updates are available. Please see the referenced advisory for details.
HP OpenView Network Node Manager 7.53
-
HP NNM753CPTHP_00002
HP-UX (PA)
http://support.openview.hp.com/selfsolve/patches -
HP NNM753CPTIPF_00002
HP-UX (IA)
http://support.openview.hp.com/selfsolve/patches -
HP NNM753CPTLIN24_00002
Linux RedHatAS2.1
http://support.openview.hp.com/selfsolve/patches -
HP NNM753CPTLIN26_00002
Linux RedHat4AS-x86_64
http://support.openview.hp.com/selfsolve/patches -
HP NNM753CPTSOL_00002
Solaris
http://support.openview.hp.com/selfsolve/patches -
HP NNM753CPTWIN_00002
Windows
http://support.openview.hp.com/selfsolve/patches
References
HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability
References:
References:
- HP OpenView Network Node Manager Product Page (HP)
- iDefense Security Advisory 06.26.09: HP Network Node Manager rping Stack Buffer (iDefense Labs
- [security bulletin] HPSBMA02430 SSRT080094 rev.1 - HP OpenView Network Node Mana ([email protected])
- HP Network Node Manager rping Stack Buffer Overflow Vulnerability (iDefense)