CVE-2011-0266

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long…

published January 13, 2011

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.4th percentile for exploit probability.

CVSS
—
EPSS
70%
Percentile
99.4
In the wild
Unconfirmed
What it is

⚠️ A long nameParams parameter could be an open door for remote attackers in HP OpenView Network Node Manager! Think of it like a restaurant that accepts an order without checking the ingredients—if the order is too long, they might mix in something toxic without realizing it! An attacker could exploit this buffer overflow to execute arbitrary code, potentially taking control of the system. This could lead to data breaches, system outages, or even full administrative access—yikes!

Put simply

Think of it like a restaurant that accepts an order without checking the ingredients—if the order is too long, they might mix in something toxic without realizing it! The buffer overflow in nnmRptConfig.exe allows remote attackers to craft requests with overly long nameParams parameters, leading to arbitrary code execution in versions 7.51 and 7.53 of HP OpenView NNM.

What to do

An attacker could exploit this buffer overflow to execute arbitrary code, potentially taking control of the system. This could lead to data breaches, system outages, or even full administrative access—yikes! While the severity is unknown, it’s wise to apply patches immediately if available and evaluate your network's exposure to this service. Consider upgrading to a more secure version if you're running these older ones! You've got this! Stay vigilant and keep your systems secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.70111 · 99.4th percentile
Published
2011-01-13T18:35Z
EPSS history
Timeline
  • 13 JAN 18:35Z
    Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long…
    cvelistv5