CVE-2010-1553

Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary…

published May 13, 2010

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
71%
Percentile
99.4
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow lurks in HP OpenView NNM, and it all starts with an invalid MaxAge parameter! This flaw could let attackers run wild from a distance. 🔥 Think of this like a restaurant that accepts any old reservation without checking the details. A rogue diner could waltz in and start changing the menu for everyone, wreaking havoc on your dining experience! With this buffer overflow, an attacker could send a specially crafted request to execute arbitrary code on your system. This means they could take control of the server, manipulate data, or even disrupt services entirely—definitely not the dinner party you want!

Put simply

Think of this like a restaurant that accepts any old reservation without checking the details. A rogue diner could waltz in and start changing the menu for everyone, wreaking havoc on your dining experience! The vulnerability stems from a stack-based buffer overflow in the getnnmdata.exe component of HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53. By exploiting an invalid MaxAge parameter, remote attackers can push the limits of the buffer and execute malicious code.

What to do

With this buffer overflow, an attacker could send a specially crafted request to execute arbitrary code on your system. This means they could take control of the server, manipulate data, or even disrupt services entirely—definitely not the dinner party you want! To protect your systems, it’s crucial to upgrade to a patched version of HP OpenView NNM as soon as possible. Additionally, consider implementing network-level protections to monitor for unusual activity. Stay ahead of the game! You’ve got this! Follow these steps and you’ll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.70564 · 99.4th percentile
Published
2010-05-13T17:00Z
EPSS history
Timeline
  • 13 MAY 17:00Z
    Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary…
    cvelistv5