HP.OpenView.NNM.CGI.Applications.Buffer.Overflow

Release Date Nov 09, 2010
Severity high
Impact System compromise: Remote attackers can gain control of vulnerable systems. Denial of service
Description This indicates an attack attempt against a buffer-overflow vulnerability in HP OpenView Network Node Manager. The vulnerability is caused by an error when the vulnerable software handles a specially crafted HTTP request. It allows a remote attacker to execute arbitrary code.
Affected Products HP OpenView Network Node Manager 7.53 HP OpenView Network Node Manager 7.51 HP OpenView Network Node Manager 7.50 HP OpenView Network Node Manager 7.01
Recommended Actions Updgrade to the latest versions: http://www.openview.hp.com/products/nnm/
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2010-2704 CVE-2009-4179 CVE-2009-0921 CVE-2009-0920 CVE-2008-0067 CVE-2007-6204 CVE-2011-3166
Reference/s http://www.securityfocus.com/bid/41839 (BugTraq)

Fortinet