CVE-2007-6204

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-071.html
http://www.securityfocus.com/bid/26741	Exploit Patch
http://www.securitytracker.com/id?1019055
http://secunia.com/advisories/27964	Vendor Advisory
http://securityreason.com/securityalert/3441
http://www.vupen.com/english/advisories/2007/4111	Vendor Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923
https://exchange.xforce.ibmcloud.com/vulnerabilities/38892
https://www.exploit-db.com/exploits/4724
http://www.securityfocus.com/archive/1/484704/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hp:openview_network_node_manager:6.41:::::::*
	cpe:2.3:a:hp:openview_network_node_manager:7.0.1:::::::*
	cpe:2.3:a:hp:openview_network_node_manager:7.51:::::::*

Information

Published : 2007-12-13 13:46

Updated : 2018-10-15 14:51

NVD link : CVE-2007-6204

Mitre link : CVE-2007-6204

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

hp

openview_network_node_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-07-071.html", "name": "http://www.zerodayinitiative.com/advisories/ZDI-07-071.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/26741", "name": "26741", "tags": ["Exploit", "Patch"], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1019055", "name": "1019055", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/27964", "name": "27964", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/3441", "name": "3441", "tags": [], "refsource": "SREASON"}, {"url": "http://www.vupen.com/english/advisories/2007/4111", "name": "ADV-2007-4111", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923", "name": "HPSBMA02281", "tags": [], "refsource": "HP"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38892", "name": "hpopenview-nnm-unspecified-code-execution(38892)", "tags": [], "refsource": "XF"}, {"url": "https://www.exploit-db.com/exploits/4724", "name": "4724", "tags": [], "refsource": "EXPLOIT-DB"}, {"url": "http://www.securityfocus.com/archive/1/484704/100/0/threaded", "name": "20071206 ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-6204", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-12-13T21:46Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-15T21:51Z"}