https://www.exploit-db.com/exploits/20239
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200012-004

HPOpenView网络节点管理器(OVNNM)是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。HPOpenviewNodeManager的SNMP服务实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令或导致拒绝服务。HPOpenviewNodeManager的发行版中默认带有OverView5CGI接口。由于存在一个未经检查的缓冲区，HPOpenviewNodeManager可能受到攻击。通过Overview5CGI接口给Web服务(默认是80端口)发送一个特殊构造的包含136字节长数据的参数字段的GET请求，可以使SNMP服务崩溃。成功地利用这个漏洞可以执行任意的代码，这取决于发送的数据内容。

source: http://www.securityfocus.com/bid/1713/info

The OverView5 CGI interface by default is shipped with HP Openview Node Manager.

HP Openview Node Manager can be compromised due to an unchecked buffer. By sending a specially crafted GET request comprised of 136 bytes to the web services (default port 80) through the Overview5 CGI interface, the SNMP service will crash.

Successful exploitation, depending on the data entered, will allow the execution of arbitrary code.

http://target/OvCgi/OpenView5.exe?Context=Snmp&Action=Snmp&Host=&Oid=<string of characters consisting of 136 bytes>

来源:XF
名称:openview-nmm-snmp-bo
链接:http://xforce.iss.net/static/5282.php
来源:BUGTRAQ
名称:20000926DST2K0014:BufferOverruninHPOpenviewNetworkNodeManagerv6.1(Round2)
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=97004856403173&w;=2
来源:HP
名称:HPSBUX0009-121
链接:http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html