CVEvulnerability
CVE-2008-4559
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-02-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.
Affected configurations
• hp openview network node manager 7.0.1
• hp openview network node manager 7.51
• hp openview network node manager 7.53
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 h20000.www2.hp.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770 Patch
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610 h20000.www2.hp.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770 Patch