CVE-2009-0920

HP Network Node Manager - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.

Exploits (2)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/17537
metasploit WORKING POC NORMAL
by Oren Isacson, juan vazquez · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_toolbar_02.rb

Scores

EPSS 0.5877
EPSS Percentile 98.2%

Details

CWE
CWE-119
Status published
Products (3)
hp/network_node_manager 7.0.1
hp/network_node_manager 7.5.1
hp/network_node_manager 7.5.3
Published Mar 25, 2009
Tracked Since Feb 18, 2026