Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the execvp_nc function in the ov.dll module in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when running on Windows, allows remote attackers to execute arbitrary code via a long HTTP request to webappmon.exe.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HP OpenView网络节点管理器ov.dll库execvp_nc函数远程栈溢出漏洞
Vulnerability Description
HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OpenView网络节点管理器中由webappmon.exe CGI程序所加载的ov.dll库存在缓冲区溢出漏洞。这个DLL库定义的execvp_nc函数不安全的将受控的命令字符串连接到了静态分配的栈缓冲区中。如果通过HTTP请求传送了超长的变量值，就可以通过strcat_new溢出这个缓冲区，导致以运行webserver用户的权限执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A