Intrusion PreventionHP.OpenView.Network.Node.Manager.Template.Format.String
Description
This indicates an attack attempt against a format-string vulnerability in the HP OpenView Network Node Manager (NNM).
The vulnerability is due to an error when the vulnerable software processes HTTP requests containing a crafted template name. It could allow remote attackers to execute arbitrary code via format string specifiers in template name.
Affected Products
HP OpenView Network Node Manager 7.53
HP OpenView Network Node Manager 7.51
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the patch, available from the vendor's web site:
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 25699 |
| Created | Mar 04, 2011 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2011-0270 |
| Exploit Prediction Score | 95.41% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | HP |