critical9.8Known exploitedPublic exploit code
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-25. Federal due date: 2022-04-15.
Apply updates per vendor instructions.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP OpenView Network Node Manager (OV NNM) - 'connectedNodes.ovp'l Remote Command Execution (Metasploit)2010-07-03 · remote · linux · Verified
- HP OpenView Network Node Manager 7.50 - Remote Command Execution2005-08-30 · remote · multiple · Verified
Impact
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Openview Network Node Manager | from 6.2 through 7.50 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://marc.info/?l=bugtraq&m=112499121725662&w=2
- http://secunia.com/advisories/16555/
- http://www.securityfocus.com/advisories/9150
- http://www.securityfocus.com/bid/14662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
- http://marc.info/?l=bugtraq&m=112499121725662&w=2
- http://secunia.com/advisories/16555/
- http://www.securityfocus.com/advisories/9150
- http://www.securityfocus.com/bid/14662
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773