CVE-2004-0709

CVE-2004-0709 affects HP OpenView Select Access 5.0–6.0 and refers to a URL handling flaw where UTF-8 encoded Unicode characters are not decoded correctly, potentially letting an attacker bypass access controls. The provided metrics indicate CVSSv2 base score 7.5 (HIGH) with network access, low a...

CVE-2004-0709

HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions...

HP OpenView Select Access protection bypass

Invalid URL esc-symbols decoding allows user to access protected directory...

HP OpenView Select Access fails to properly decode UTF-8 encoded unicode characters in URLs

Overview There is a vulnerability in the way HP OpenView Select Access decodes UTF-8 encoded unicode characters in URLs. This vulnerability could allow a remote user to gain access to resources the user would otherwise be unauthorized to access. Description HP OpenView Select Access is a software...

CVE-2003-1493

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

CVE-2003-1494

Unspecified vulnerability in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service CPU consumption via a crafted TCP packet...

CVE-2003-0746

Various Distributed Computing Environment DCE implementations, including HP OpenView, allow remote attackers to cause a denial of service process hang or termination via certain malformed inputs, as triggered by attempted exploits against the vulnerabilities CVE-2003-0352 or CVE-2003-0605, such a...

CVE-2003-0746

CVE-2003-0746 is a composite DoS entry tied to earlier MS03-026-style DCOM/RPC vulnerabilities (CVE-2003-0352, CVE-2003-0605). Connected sources confirm that multiple DCE/ RPC implementations, notably Microsoft Windows RPCSS/DCOM interfaces, could be overwhelmed by malformed DCERPC messages, with...

CVE-2002-1408

Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...

CVE-2002-1408

Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to 1 "'read-only' community access," and/or 2 an easily guessable community name...

CVE-2001-1123

The CVE-2001-1123 vulnerability affects HP OpenView Network Node Manager (NNM) versions 6.2 and earlier. It allows a local attacker to potentially execute arbitrary code due to a suspected buffer overflow when processing a long hostname or object ID, enabling local privilege impact on the host ru...

CVE-2001-1123

Vulnerability in Network Node Manager NNM 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID...

CVE-2001-1123

Vulnerability in Network Node Manager NNM 6.2 and earlier in HP OpenView allows a local user to execute arbitrary code, possibly via a buffer overflow in a long hostname or object ID...

CVE-2001-0552

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

CVE-2001-0552

CVE-2001-0552 affects HP OpenView Network Node Manager (NNM) 6.1 and Tivoli NetView (5.x/6.x). The vulnerability arises from ovactiond handling SNMP traps; remote attackers can inject shell metacharacters in a trap message to execute arbitrary commands, gaining the privileges of ovactiond (typica...

CVE-2001-0552

ovactiond in HP OpenView Network Node Manager NNM 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message...

Удаленное выполнение команд через HP Openview / Tivoli NetView (remote execution)

При получении определенного snmp-trap данные передаются внешнему приложению через командную строку, при этом не производится проверка shell-символов...

openview.snmp.txt

HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVENT OVMgXNNMGener...

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution

IBM Tivoli NetView 56 - OVActionD SNMPNotify Command Execution source: https://www.securityfocus.com/bid/2845/info ovactiond is part of the system management software packages OpenView and Netview, distributed by HP and IBM. It is designed for use on enterprise systems, and offers remote...

HP Openview NNM6.1 ovactiond bin exploit

Hello, Summery: HP Openview NNM6.1 and earlier running on unix have a problem with the suid bin executable ovactiond. It allows for starting of any program by just sending a trap or event to the station running the daemon. Details: in the trapd.conf the following is defined by default NNM6.1: EVE...