CVE-2014-2624

Related Files

HP Network Node Manager I PMD Buffer Overflow

Posted Sep 30, 2014

Authored by juan vazquez, d(-_-)b | Site metasploit.com

This Metasploit module exploits a stack buffer overflow in HP Network Node Manager I (NNMi). The vulnerability exists in the pmd service, due to the insecure usage of functions like strcpy and strcat while handling stack_option packets with user controlled data. In order to bypass ASLR this module uses a proto_tbl packet to leak an libov pointer from the stack and finally build the rop chain to avoid NX.

tags | exploit, overflow

advisories | CVE-2014-2624

SHA-256 | ed8dcf6077fc962dee63928b9374f08f765d9613b6097985fa09b44f33f8d338

Download | Favorite | View

HP Security Bulletin HPSBMU03075

Posted Sep 11, 2014

Authored by HP | Site hp.com

HP Security Bulletin HPSBMU03075 - A potential security vulnerability has been identified with HP Network Node Manager I (NNMi) on Windows and Linux. This vulnerability could be exploited remotely to allow arbitrary code execution. Revision 1 of this advisory.

tags | advisory, arbitrary, code execution

systems | linux, windows

advisories | CVE-2014-2624

SHA-256 | 045e91742bf0a51854d6e5c29dec360e40077d54bb40679404151c3b61dec485

Download | Favorite | View