HP OpenView Network Node Manager Buffer Overflow Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system.

1. Due to a stack overflow error in the "OvCgi/Toolbar.exe" CGI when processing an overly long "OvOSLocale" cookie parameter, which could be exploited by remote attackers to execute arbitrary code via a specially crafted HTTP request.

2. Due to a heap overflow error in the "OvCgi/Toolbar.exe" CGI when processing an overly long "OvAcceptLang" cookie parameter, which could be exploited by remote attackers to execute arbitrary code via a specially crafted HTTP request.

3. Due to a heap overflow error in the "OvCgi/Toolbar.exe" CGI when processing an overly long "Accept-Language" header value, which could be exploited by remote attackers to execute arbitrary code via a specially crafted HTTP request.