Vulnerability Details CVE-2008-1842
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.338
EPSS Ranking 96.7%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2008-1842
-
cpe:2.3:a:hp:openview_network_node_manager:-
-
cpe:2.3:a:hp:openview_network_node_manager:4.11
-
cpe:2.3:a:hp:openview_network_node_manager:5.0.1
-
cpe:2.3:a:hp:openview_network_node_manager:5.01
-
cpe:2.3:a:hp:openview_network_node_manager:6.0.1
-
cpe:2.3:a:hp:openview_network_node_manager:6.1
-
cpe:2.3:a:hp:openview_network_node_manager:6.10
-
cpe:2.3:a:hp:openview_network_node_manager:6.2
-
cpe:2.3:a:hp:openview_network_node_manager:6.20
-
cpe:2.3:a:hp:openview_network_node_manager:6.31
-
cpe:2.3:a:hp:openview_network_node_manager:6.4
-
cpe:2.3:a:hp:openview_network_node_manager:6.41
-
cpe:2.3:a:hp:openview_network_node_manager:7.0.1
-
cpe:2.3:a:hp:openview_network_node_manager:7.01
-
cpe:2.3:a:hp:openview_network_node_manager:7.50
-
cpe:2.3:a:hp:openview_network_node_manager:7.51
-
cpe:2.3:a:hp:openview_network_node_manager:7.53
-
cpe:2.3:a:hp:openview_network_node_manager:8.01