critical10.0Public exploit code
CVE-2008-0067
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Buffer Overflow (Metasploit)2010-05-09 · remote · cgi · Verified
Impact
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Openview Network Node Manager | Version 7.51 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147