Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2008-04-16 10:05
Updated : 2018-10-11 13:37
NVD link : CVE-2008-1842
Mitre link : CVE-2008-1842
JSON object : View
CWE
CWE-189
Numeric Errors
Products Affected
hp
- openview_network_node_manager