CVEvulnerability
CVE-2008-0067
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Affected configurations
• hp openview network node manager 7.51
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=bugtraq&m=123247393715913&w=2 marc.info
- http://secunia.com/advisories/28074 Vendor Advisory
- http://secunia.com/secunia_research/2008-13/ Vendor Advisory
- http://securityreason.com/securityalert/4885 securityreason.com
- http://securityreason.com/securityalert/8307 securityreason.com
- http://securitytracker.com/id?1021521 securitytracker.com
- http://www.securityfocus.com/archive/1/499826/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33147 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=123247393715913&w=2 marc.info
- http://secunia.com/advisories/28074 Vendor Advisory
- http://secunia.com/secunia_research/2008-13/ Vendor Advisory
- http://securityreason.com/securityalert/4885 securityreason.com
- http://securityreason.com/securityalert/8307 securityreason.com
- http://securitytracker.com/id?1021521 securitytracker.com
- http://www.securityfocus.com/archive/1/499826/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33147 www.securityfocus.com