PRIOn knowledge basePRION:CVE-2009-3845Design/Logic Flaw
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.035 Low
EPSS
Percentile
91.3%
The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
References
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
www.securityfocus.com/archive/1/508345/100/0/threaded
www.securityfocus.com/bid/37261
www.securityfocus.com/bid/37300
zerodayinitiative.com/advisories/ZDI-09-094/
exchange.xforce.ibmcloud.com/vulnerabilities/54651
marc.info/?l=bugtraq&m=126046355120442&w=2
Related
7.8 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.035 Low
EPSS
Percentile
91.3%