CVEvulnerability
CVE-2008-0068
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.
Affected configurations
• hp openview network node manager 7.51
• hp openview network node manager 7.53
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://aluigi.altervista.org/adv/closedviewx-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=121553649611253&w=2 marc.info
- http://secunia.com/advisories/29796 secunia.com
- http://secunia.com/secunia_research/2008-4/advisory/ secunia.com
- http://securityreason.com/securityalert/3814 securityreason.com
- http://www.osvdb.org/44359 www.osvdb.org
- http://www.securityfocus.com/archive/1/490771 www.securityfocus.com
- http://www.securityfocus.com/archive/1/490834/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28745 Exploit
- http://www.securitytracker.com/id?1019838 www.securitytracker.com
- http://www.securitytracker.com/id?1019839 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1214/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41790 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/closedviewx-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=121553649611253&w=2 marc.info
- http://secunia.com/advisories/29796 secunia.com
- http://secunia.com/secunia_research/2008-4/advisory/ secunia.com
- http://securityreason.com/securityalert/3814 securityreason.com
- http://www.osvdb.org/44359 www.osvdb.org
- http://www.securityfocus.com/archive/1/490771 www.securityfocus.com
- http://www.securityfocus.com/archive/1/490834/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28745 Exploit
- http://www.securitytracker.com/id?1019838 www.securitytracker.com
- http://www.securitytracker.com/id?1019839 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1214/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41790 exchange.xforce.ibmcloud.com