CVE-2008-0067

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/33147
http://secunia.com/secunia_research/2008-13/	Vendor Advisory
http://securitytracker.com/id?1021521
http://secunia.com/advisories/28074	Vendor Advisory
http://securityreason.com/securityalert/4885
http://marc.info/?l=bugtraq&m=123247393715913&w=2
http://securityreason.com/securityalert/8307
http://www.securityfocus.com/archive/1/499826/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*

Information

Published : 2009-01-08 11:30

Updated : 2018-10-15 14:57

NVD link : CVE-2008-0067

Mitre link : CVE-2008-0067

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

hp

openview_network_node_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/33147", "name": "33147", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/secunia_research/2008-13/", "name": "http://secunia.com/secunia_research/2008-13/", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://securitytracker.com/id?1021521", "name": "1021521", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/28074", "name": "28074", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/4885", "name": "4885", "tags": [], "refsource": "SREASON"}, {"url": "http://marc.info/?l=bugtraq&m=123247393715913&w=2", "name": "HPSBMA02400", "tags": [], "refsource": "HP"}, {"url": "http://securityreason.com/securityalert/8307", "name": "8307", "tags": [], "refsource": "SREASON"}, {"url": "http://www.securityfocus.com/archive/1/499826/100/0/threaded", "name": "20090107 Secunia Research: HP OpenView Network Node Manager Multiple Vulnerabilities", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-0067", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2009-01-08T19:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-15T21:57Z"}