what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files

HP OpenView Network Node Manager ovalarm.exe CGI Buffer Overflow

Posted Jan 22, 2010

Authored by jduck | Site metasploit.com

This Metasploit module exploits a stack overflow in HP OpenView Network Node Manager 7.53. By sending a specially crafted CGI request to ovalarm.exe, an attacker can execute arbitrary code. This specific vulnerability is due to a call to "sprintf_new" in the "isWide" function within "ovalarm.exe". A stack buffer overflow occurs when processing an HTTP request that contains the following. 1. An "Accept-Language" header longer than 100 bytes 2. An "OVABverbose" URI variable set to "on", "true" or "1" The vulnerability is related to "_WebSession::GetWebLocale()" .. NOTE: This exploit has been tested successfully with a reverse_ord_tcp payload.

tags | exploit, web, overflow, arbitrary, cgi

advisories | CVE-2009-4179

SHA-256 | e54d42cfbc8bbc738ef568c5e491af71d30811bb7fa5db456ba682b823955033

Download | Favorite | View