CVEvulnerability
CVE-2007-6204
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.
Affected configurations
• hp openview network node manager 6.41
• hp openview network node manager 7.0.1
• hp openview network node manager 7.51
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 h20000.www2.hp.com
- http://secunia.com/advisories/27964 Vendor Advisory
- http://securityreason.com/securityalert/3441 securityreason.com
- http://www.securityfocus.com/archive/1/484704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26741 Exploit, Patch
- http://www.securitytracker.com/id?1019055 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4111 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-071.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4724 www.exploit-db.com
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 h20000.www2.hp.com
- http://secunia.com/advisories/27964 Vendor Advisory
- http://securityreason.com/securityalert/3441 securityreason.com
- http://www.securityfocus.com/archive/1/484704/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26741 Exploit, Patch
- http://www.securitytracker.com/id?1019055 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4111 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-071.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4724 www.exploit-db.com