Unscored severity · published Jun 11, 2009
CVE-2009-1420
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka…
–
CVSS
13.4%
EPSS
No
On KEV
Description
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)13.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ON
Openview Network Node Manager · HP
7.51; 7.51; 7.51; 7.51; 7.53; 7.53; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1420
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1420
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810
Patch
http://marc.info/?l=bugtraq&m=124457320614552&w=2
Vendor Advisory
http://secunia.com/advisories/35408
Patch
http://securitytracker.com/id?1022360
Patch
http://www.securityfocus.com/bid/35267
www.vupen.com
http://www.vupen.com/english/advisories/2009/1549
More from Openview Network Node Manager
9.8
CVE-2005-2773
HP OpenView Network Node Manager Remote Code Execution Vulnerability
–
CVE-2011-3167
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1210
–
CVE-2011-3166
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209
–
CVE-2011-3165
Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208
–
CVE-2011-0271
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary…