HP OpenView Network Node Manager Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in HP OpenView Network Node Manager (OV NNM), which could be exploited by remote attackers to compromise a vulnerable system.

1. A format string error within the "ovet_demandpoll.exe" process (invoked via the "webappmon.exe" CGI application) when processing a malformed "sel" POST parameter, which could be exploited by remote attackers to execute arbitrary code.

2. A stack overflow error within the "netmon.exe" daemon (invoked via the "webappmon.exe" CGI application) when processing a malformed "sel" POST parameter, which could be exploited by remote attackers to execute arbitrary code.

3. A stack overflow errors within the "snmpviewer.exe" CGI application when processing a malformed parameters, which could be exploited by remote attackers to execute arbitrary code.

4. A stack overflow error within the "getnnmdata.exe" CGI application when processing a malformed "MaxAge" parameter, which could be exploited by remote attackers to execute arbitrary code.

5. A stack overflow error within the "getnnmdata.exe" CGI application when processing a malformed "iCount" POST parameter, which could be exploited by remote attackers to execute arbitrary code.

6. A stack overflow error within the "getnnmdata.exe" CGI application when processing a malformed "Hostname" parameter, which could be exploited by remote attackers to execute arbitrary code.