VulnerabilityModified

CVE-2008-0068

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.

MEDIUM 5.0EPSS 5.09%

Does this matter?

Lower severity and a low EPSS score (5.09%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 5.09% probability · 92th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: hp/openview network node manager
Source: PSIRT-CNA@flexerasoftware.com

References

http://aluigi.altervista.org/adv/closedviewx-adv.txtExploit
http://marc.info/?l=bugtraq&m=121553649611253&w=2
http://secunia.com/advisories/29796
http://secunia.com/secunia_research/2008-4/advisory/
http://securityreason.com/securityalert/3814
http://www.osvdb.org/44359
http://www.securityfocus.com/archive/1/490771
http://www.securityfocus.com/archive/1/490834/100/0/threaded
http://www.securityfocus.com/bid/28745Exploit
http://www.securitytracker.com/id?1019838
http://www.securitytracker.com/id?1019839
http://www.vupen.com/english/advisories/2008/1214/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41790
http://aluigi.altervista.org/adv/closedviewx-adv.txtExploit
http://marc.info/?l=bugtraq&m=121553649611253&w=2
http://secunia.com/advisories/29796
http://secunia.com/secunia_research/2008-4/advisory/
http://securityreason.com/securityalert/3814
http://www.osvdb.org/44359
http://www.securityfocus.com/archive/1/490771
http://www.securityfocus.com/archive/1/490834/100/0/threaded
http://www.securityfocus.com/bid/28745Exploit
http://www.securitytracker.com/id?1019838
http://www.securitytracker.com/id?1019839
http://www.vupen.com/english/advisories/2008/1214/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41790

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.