CVE-2011-0266

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 70%

from disclosure to weapon69 days

Published on NVDJan 13

1st PoC+69d

metasploitJan 10

exploitation probability

70%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/17028unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://securityreason.com/securityalert/8151 https://exchange.xforce.ibmcloud.com/vulnerabilities/64650 http://www.securityfocus.com/archive/1/515628 http://www.securityfocus.com/bid/45762 http://www.securitytracker.com/id?1024951 http://www.vupen.com/english/advisories/2011/0085 http://www.zerodayinitiative.com/advisories/ZDI-11-008/