10

CVE-2010-1550

Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Openview Network Node Manager Version 7.0.1
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition hp-ux
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition linux
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition solaris
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition windows
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition hp-ux
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition linux
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition solaris
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 11.77% 0.955
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://marc.info/?l=bugtraq&m=127360750704351&w=2
http://www.securityfocus.com/archive/1/511245/100/0/threaded
http://zerodayinitiative.com/advisories/ZDI-10-081/