10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.908 High
EPSS
Percentile
98.5%
Added: 01/14/2009
CVE: CVE-2008-0067
BID: 33147
HP OpenView Network Node Manager is network availability and performance management software.
A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending an HTTP request for the **getcvdata.exe**
CGI program with a long, specially crafted parameter string.
Restrict access to the **getcvdata.exe**
CGI program. Apply a fix when available.
<http://secunia.com/secunia_research/2008-13/>
Exploit works on HP OpenView Network Node Manager 7.53.
Windows 2000