VulnerabilityModified
CVE-2008-4562
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter.
HIGH 10.0EPSS 8.44%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (8.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 8.44% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- hp/openview network node manager
- Source
- cve@mitre.org
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=772
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.