Some vulnerabilities have been reported in HP OpenView Network Node Manager, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors in several CGI applications (ovlogin.exe, OpenView5.exe, snmpviewer.exe, webappmon.exe). These can be exploited to cause stack-based buffer overflows by sending overly long arguments to certain CGI variables.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities affect versions 6.41, 7.01, 7.51 running on HP-UX B.11.00, B.11.11, and B.11.23, Solaris, Windows NT, Windows 2000, Windows XP, and Linux.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by Tenable Network Security and reported via ZDI.

Original Advisory
HPSBMA02281 SSRT061261:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-071.html

Deep Links
Links available to Secunia VIM customers