Unscored severity · published Jan 8, 2009
CVE-2008-0067
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string…
–
CVSS
63.4%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Exploitation
Is it being used?
Exploit prediction (EPSS)63.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
7.51 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0067
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0067
marc.info
http://marc.info/?l=bugtraq&m=123247393715913&w=2
Vendor Advisory
http://secunia.com/advisories/28074
Vendor Advisory
http://secunia.com/secunia_research/2008-13/
securityreason.com
http://securityreason.com/securityalert/4885
securityreason.com
http://securityreason.com/securityalert/8307
securitytracker.com
http://securitytracker.com/id?1021521
More from Openview Network Node Manager
9.8
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…