CVE-2008-0067

HP Openview Network Node Manager - Memory Corruption

Title source: rule

Description

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotecgi
https://www.exploit-db.com/exploits/16795
metasploit WORKING POC GREAT
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_toolbar_01.rb

Scores

EPSS 0.8195
EPSS Percentile 99.2%

Details

CWE
CWE-119
Status published
Products (1)
hp/openview_network_node_manager 7.51
Published Jan 08, 2009
Tracked Since Feb 18, 2026