CVEvulnerability
CVE-2011-0271
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability."
Affected configurations
• hp openview network node manager 7.51
• hp openview network node manager 7.53
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=887 labs.idefense.com
- http://www.securityfocus.com/archive/1/515628 www.securityfocus.com
- http://www.securityfocus.com/bid/45762 www.securityfocus.com
- http://www.securitytracker.com/id?1024951 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0085 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64657 exchange.xforce.ibmcloud.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=887 labs.idefense.com
- http://www.securityfocus.com/archive/1/515628 www.securityfocus.com
- http://www.securityfocus.com/bid/45762 www.securityfocus.com
- http://www.securitytracker.com/id?1024951 www.securitytracker.com
- http://www.vupen.com/english/advisories/2011/0085 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64657 exchange.xforce.ibmcloud.com