CVE-2008-0067
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 63.4%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 63.42% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- hp/openview network node manager
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074Vendor Advisory
- http://secunia.com/secunia_research/2008-13/Vendor Advisory
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074Vendor Advisory
- http://secunia.com/secunia_research/2008-13/Vendor Advisory
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.