Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2011-0262 | First vendor Publication | 2011-01-13 |
| Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Buffer overflow in the stringToSeconds function in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via large values of variables to jovgraph.exe. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0262 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 |
SAINT Exploits
| Description | Link |
|---|---|
| HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil.dll stringToSeconds Buffer Overflow | More info here |
OpenVAS Exploits
| Date | Description |
|---|---|
| 2011-01-13 | Name : HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities File : nvt/gb_hp_openview_nnm_45762.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 70470 | HP OpenView Network Node Manager (OV NNM) ovwebsnmpsrv.exe ovutil.dll stringT... HP OpenView Network Node Manager is prone to an overflow condition. The 'stringToSeconds' function in 'ovutil.dll 'in 'ovwebsnmpsrv.exe' fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted HTTP request, a remote attacker can potentially execute arbitrary code. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | HP OpenView Network Node Manager ovwebsnmpsrv.exe displayWidth buffer overflo... RuleID : 18760 - Revision : 10 - Type : SERVER-WEBAPP |
| 2014-01-10 | HP OpenView Network Node Manager ovwebsnmpsrv.exe displayWidth buffer overflo... RuleID : 18759 - Revision : 10 - Type : SERVER-WEBAPP |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2012-03-06 | Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_41606.nasl - Type : ACT_GATHER_INFO |
| 2012-03-06 | Name : The remote HP-UX host is missing a security-related patch. File : hpux_PHSS_41607.nasl - Type : ACT_GATHER_INFO |
| 2011-01-21 | Name : The remote web server contains a CGI application that allows remote code exec... File : openview_nnm_execvp_nc.nasl - Type : ACT_ATTACK |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:06:24 |
|
| 2024-11-28 12:24:33 |
|
| 2021-05-04 12:13:52 |
|
| 2021-04-22 01:15:03 |
|
| 2020-05-23 00:27:37 |
|
| 2017-08-17 09:23:14 |
|
| 2016-04-26 20:28:56 |
|
| 2014-02-17 10:59:49 |
|
| 2014-01-19 21:27:24 |
|
| 2013-05-10 22:52:41 |
|
