Core Security Technologies has reported some vulnerabilities in HP OpenView Network Node Manager, which can be exploited by malicious people to potentially compromise a vulnerable system.

1) A boundary error can be exploited to cause a stack-based buffer overflow via an HTTP request containing an overly long "OvOSLocale" cookie, sent to a CGI application (e.g. Toolbar.exe).

2) A boundary error can be exploited to cause a heap-based buffer overflow via an HTTP request request containing an overly long "OvAcceptLang" cookie or an overly long "Accept-Language" header, sent to a CGI application (e.g. Toolbar.exe).

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

The vulnerabilities are reported in versions 7.01, 7.51, and 7.53 running on HP-UX, Linux, Solaris, and Windows.

Solution
Install patches.
Further details available in Customer Area

Provided and/or discovered by
Oren Isacson, Core Security Technologies.

Changelog
Further details available in Customer Area

Original Advisory
HPSBMA02416 SSRT090008:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01696729

Core Security:
http://www.coresecurity.com/content/openview-buffer-overflows

Deep Links
Links available in Customer Area