Posted on Tuesday, April 15th, 2008 | Bookmark on del.icio.us

HP OpenView NNM Scanning Increase

by Jose Nazario

Following the publication of exploit code for a buffer overflow in HP OpenView Network Node Manager (NNM) 7.x on TCP port 2954, we’re seeing an uptick in scanning for this. This follows a bump last week. More hosts are scanning and more traffic is being sent.

TCP2954.png

This issue remains unpatched by HP. ACLs will work to prevent unauthorized networks from attempting connections.

UPDATE Here’s traffic on this service for the past week. We’ve been seeing steadily increasing interest …

Leave a Comment