CVE-2007-6204

2007-12-1321:46:00

CWE-119

[email protected]

web.nvd.nist.gov

openview

nnm

cve-2007-6204

remote code execution

buffer overflow

security vulnerability

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.535 Medium

EPSS

Percentile

97.6%

JSON

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

CPENameOperatorVersion
hp:openview_network_node_managerhp openview network node managereq7.51
hp:openview_network_node_managerhp openview network node managereq6.41
hp:openview_network_node_managerhp openview network node managereq7.0.1

CPE	Name	Operator	Version
hp:openview_network_node_manager	hp openview network node manager	eq	7.51
hp:openview_network_node_manager	hp openview network node manager	eq	6.41
hp:openview_network_node_manager	hp openview network node manager	eq	7.0.1