Unscored severity · published Apr 16, 2008
CVE-2008-0068
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory…
–
CVSS
5.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.1% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
7.51; 7.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0068
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0068
Exploit
http://aluigi.altervista.org/adv/closedviewx-adv.txt
marc.info
http://marc.info/?l=bugtraq&m=121553649611253&w=2
secunia.com
http://secunia.com/advisories/29796
secunia.com
http://secunia.com/secunia_research/2008-4/advisory/
securityreason.com
http://securityreason.com/securityalert/3814
www.osvdb.org
http://www.osvdb.org/44359
More from Openview Network Node Manager
9.8
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…