CVE-2009-3845

2009-12-1022:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

openview

nnm

cve-2009-3845

remote execution

security vulnerability

http server

perl scripts

7.5 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.8%

JSON

The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.

CPENameOperatorVersion
hp:openview_network_node_managerhp openview network node managereq7.53
hp:openview_network_node_managerhp openview network node managereq7.0.1
hp:openview_network_node_managerhp openview network node managereq7.51

CPE	Name	Operator	Version
hp:openview_network_node_manager	hp openview network node manager	eq	7.53
hp:openview_network_node_manager	hp openview network node manager	eq	7.0.1
hp:openview_network_node_manager	hp openview network node manager	eq	7.51