HP OpenView Network Node Manager 'ovutil.dll' Stack Buffer Overflow Vulnerability

Bugtraq ID:	40638
Class:	Boundary Condition Error
CVE:	CVE-2010-1961
Remote:	Yes
Local:	No
Published:	Jun 08 2010 12:00AM
Updated:	Mar 24 2011 11:16AM
Credit:	Anonymous working with Tipping Point and the Zero Day Initiative
Vulnerable:	HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51
Not Vulnerable:

HP OpenView Network Node Manager 'ovutil.dll' Stack Buffer Overflow Vulnerability

HP OpenView Network Node Manager (NNM) is prone to a stack-based buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

HP OpenView Network Node Manager 'ovutil.dll' Stack Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/40638.rb

HP OpenView Network Node Manager 'ovutil.dll' Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for details.

HP OpenView Network Node Manager 'ovutil.dll' Stack Buffer Overflow Vulnerability

References:

• Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Exe (HP)
  
• HP OpenView Network Node Manager Product Page (HP)