HP OpenView Network Node Manager (NNM) is a system management software package distributed by HP. It is designed for use on enterprise systems, and offers remote administrative facilities. A problem in the software could allow a local user elevated privileges. Due to the unsafe handling of command line input by the Event Correlation Services daemon (ecsd), a buffer overflow makes it possible to overwrite stack variables, including the return address. This problem makes it possible for a local user to execute arbitrary code, and gain elevated privileges on the local system.
HP OpenView Network Node Manager (NNM) is a system management software package distributed by HP. It is designed for use on enterprise systems, and offers remote administrative facilities. A problem in the software could allow a local user elevated privileges. Due to the unsafe handling of command line input by the Event Correlation Services daemon (ecsd), a buffer overflow makes it possible to overwrite stack variables, including the return address. This problem makes it possible for a local user to execute arbitrary code, and gain elevated privileges on the local system.