CVE-2009-3840
HP OpenView Network Node Manager 7.51 and 7.53 - Denial of Service via Invalid Error Code Field
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3840. PoCs published by Core Security.
AI-analyzed exploit summary The exploit demonstrates a denial-of-service vulnerability in IBM SolidDB by sending a crafted packet with an invalid error code to trigger an exception and crash the service. The PoC code constructs a malformed packet and sends it to the target on port 2315/tcp.
Description
The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.
Exploits (2)
The exploit demonstrates a denial-of-service vulnerability in IBM SolidDB by sending a crafted packet with an invalid error code to trigger an exception and crash the service. The PoC code constructs a malformed packet and sends it to the target on port 2315/tcp.
The exploit demonstrates a denial-of-service vulnerability in HP Openview NNM 7.53 by sending a crafted packet with an invalid error code to the embedded database service on port 2690/tcp, causing the service to terminate abnormally.