{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2010-06-08T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-10T18:57:01", "orgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "shortName": "hp"}, "references": [{"name": "40638", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/40638"}, {"name": "HPSBMA02537", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"tags": ["x_refsource_MISC"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-106/"}, {"name": "20100608 ZDI-10-106: Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/511731/100/0/threaded"}, {"name": "40101", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/40101"}, {"name": "SSRT010027", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"name": "ovnnm-getproxiedstorageaddress-bo(59250)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59250"}, {"name": "1024071", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1024071"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "hp-security-alert@hp.com", "ID": "CVE-2010-1961", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "40638", "refsource": "BID", "url": "http://www.securityfocus.com/bid/40638"}, {"name": "HPSBMA02537", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"name": "http://www.zerodayinitiative.com/advisories/ZDI-10-106/", "refsource": "MISC", "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-106/"}, {"name": "20100608 ZDI-10-106: Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/511731/100/0/threaded"}, {"name": "40101", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/40101"}, {"name": "SSRT010027", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"name": "ovnnm-getproxiedstorageaddress-bo(59250)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59250"}, {"name": "1024071", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1024071"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T02:17:14.359Z"}, "title": "CVE Program Container", "references": [{"name": "40638", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/40638"}, {"name": "HPSBMA02537", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-106/"}, {"name": "20100608 ZDI-10-106: Hewlett-Packard OpenView NNM ovutil.dll getProxiedStorageAddress Remote Code Execution Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/511731/100/0/threaded"}, {"name": "40101", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/40101"}, {"name": "SSRT010027", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"name": "ovnnm-getproxiedstorageaddress-bo(59250)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59250"}, {"name": "1024071", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1024071"}]}]}, "cveMetadata": {"assignerOrgId": "74586083-13ce-40fd-b46a-8e5d23cfbcb2", "assignerShortName": "hp", "cveId": "CVE-2010-1961", "datePublished": "2010-06-10T00:00:00", "dateReserved": "2010-05-19T00:00:00", "dateUpdated": "2024-08-07T02:17:14.359Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*", "matchCriteriaId": "F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*", "matchCriteriaId": "6692E05F-4864-449F-8A52-9001028D8C44", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*", "matchCriteriaId": "2A40F2C6-AFF9-4D63-ACD0-A9D37160BA3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*", "matchCriteriaId": "FC1DA299-A180-4078-9172-67D116840D29", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*", "matchCriteriaId": "FED610E9-7639-48FE-8B4F-B394A7EEC7C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*", "matchCriteriaId": "A3A4986C-97B8-4382-AC4B-55E22C6BAE62", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*", "matchCriteriaId": "C1935DA4-A1AF-4867-BCB1-F5BB75360702", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*", "matchCriteriaId": "769ED1A5-C3C5-404E-8040-655D69C2AA88", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*", "matchCriteriaId": "186EFE05-AC1C-48FF-91B7-0CCD49FEABCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*", "matchCriteriaId": "D5CE1F56-FA80-416D-8F42-C1C291F0965C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function."}, {"lang": "es", "value": "Desbordamiento de b\u00faffer en ovutil.dll de ovwebsnmpsrv.exe de HP OpenView Network Node Manager (OV NNM) v7.51 y v7.53 permite a los atacantes remotos ejecutar c\u00f3digo a su elecci\u00f3n a trav\u00e9s de variables no especificadas a jovgraph.exe, que no son manejadas adecuadamente en una llamada a la funci\u00f3n \"sprintf\"."}], "id": "CVE-2010-1961", "lastModified": "2018-10-10T19:58:04.470", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2010-06-10T00:30:07.613", "references": [{"source": "hp-security-alert@hp.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://marc.info/?l=bugtraq&m=127602909915281&w=2"}, {"source": "hp-security-alert@hp.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/40101"}, {"source": "hp-security-alert@hp.com", "url": "http://www.securityfocus.com/archive/1/511731/100/0/threaded"}, {"source": "hp-security-alert@hp.com", "url": "http://www.securityfocus.com/bid/40638"}, {"source": "hp-security-alert@hp.com", "url": "http://www.securitytracker.com/id?1024071"}, {"source": "hp-security-alert@hp.com", "url": "http://www.zerodayinitiative.com/advisories/ZDI-10-106/"}, {"source": "hp-security-alert@hp.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59250"}], "sourceIdentifier": "hp-security-alert@hp.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}