Design/Logic Flaw

2009-02-0821:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.5%

JSON

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.

CPENameOperatorVersion
openview_network_node_managereq7.53 solaris
openview_network_node_managereq7.53 windows
openview_network_node_managereq7.0.1 hp-ux
openview_network_node_managereq7.51 solaris
openview_network_node_managereq7.51 windows
openview_network_node_managereq7.0.1 linux
openview_network_node_managereq7.0.1 solaris
openview_network_node_managereq7.53
openview_network_node_managereq7.51
openview_network_node_managereq7.53 linux

Name	Operator	Version
openview_network_node_manager	eq	7.53 solaris
openview_network_node_manager	eq	7.53 windows
openview_network_node_manager	eq	7.0.1 hp-ux
openview_network_node_manager	eq	7.51 solaris
openview_network_node_manager	eq	7.51 windows
openview_network_node_manager	eq	7.0.1 linux
openview_network_node_manager	eq	7.0.1 solaris
openview_network_node_manager	eq	7.53
openview_network_node_manager	eq	7.51
openview_network_node_manager	eq	7.53 linux