CVE-2010-1960

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 69%

from disclosure to weapon286 days

Published on NVDJun 10

1st PoC+286d

metasploitJun 8

exploitation probability

69%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in the error handling functionality in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long, invalid option to jovgraph.exe.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/17043unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=127602909915281&w=2 http://secunia.com/advisories/40101 https://exchange.xforce.ibmcloud.com/vulnerabilities/59249 http://www.securityfocus.com/archive/1/511734/100/0/threaded http://www.securityfocus.com/bid/40637 http://www.securitytracker.com/id?1024071 http://www.zerodayinitiative.com/advisories/ZDI-10-105/