Luigi Auriemma has discovered a vulnerability in HP OpenView Network Node Manager, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

The vulnerability is caused due to an input validation error within ovspmd.exe and can be exploited to cause a heap-based buffer overflow by sending a specially crafted, overly long packet to default port 8886/TCP.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is confirmed in version 7.53 and 7.51 and affects versions 7.01, 7.51, 7.53, and 8.01 running on HP-UX, Solaris, Linux, and Windows.

Solution
Apply updates (see vendor's advisory for details).

Provided and/or discovered by
Luigi Auriemma

The vendor also credits Liu Zhen Hua of FortiGuard Global Security Research Team.

Changelog
Further details available to Secunia VIM customers

Original Advisory
HPSBMA02338 SSRT080024, SSRT080041:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01466051

HPSBMA02340 SSRT080024, SSRT080041:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01471755

Luigi Auriemma:
http://aluigi.altervista.org/adv/closedview-adv.txt

Deep Links
Links available to Secunia VIM customers