CVE-2010-1550
high · 10Format string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.
10
CVSS
11.8%
EPSS (exploit prob.)
96th
EPSS percentile
2010-05-13
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-134
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hp | openview_network_node_manager | 7.0.1 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://www.securityfocus.com/archive/1/511245/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-10-081/
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://www.securityfocus.com/archive/1/511245/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-10-081/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-1550