HP OpenView Network Node Manager OpenView5.exe buffer overflow

Added: 03/23/2009
CVE: CVE-2008-0067
BID: 33147

Background

HP OpenView Network Node Manager is network availability and performance management software.

Problem

A buffer overflow vulnerability in the **OpenView5.exe** CGI program allows remote attackers to execute arbitrary commands.

Resolution

Apply one of the patches referenced in HPSBMA02400 SSRT080144.

References

<http://secunia.com/secunia_research/2008-13/&gt;

Limitations

Exploit works on HP OpenView Network Node Manager 7.53 on Windows 2000.

Platforms

Windows