Vulnerability Details CVE-2008-0067
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.746
EPSS Ranking 98.8%
CVSS Severity
CVSS v2 Score 10.0
References
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
Products affected by CVE-2008-0067
-
cpe:2.3:a:hp:openview_network_node_manager:7.51