HP OpenView Network Node Manager Multiple CGI Remote Overflows

The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to various parameters used in the 'Openview5', 'snmpview', 'ovlogin' scripts before using it. By sending long parameters, an attacker would be able to produce a stack-based overflow and exploit it to...

Hewlett-Packard OpenView Network Node Manager Multiple CGI Buffer Overflow Vulnerabilities

These vulnerabilities allow remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard HP OpenView Network Node Manager NNM. Authentication is not required to exploit these vulnerabilities. The specific flaws exists within the CGI applications that handle the...

HP-UX PHSS_37141 : s700_800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 17

s700800 11.X OV NNM6.4x/ET2.0x Intermediate Patch 17 : The remote HP-UX host is affected by multiple vulnerabilities : - Potential vulnerabilities have been identified with HP OpenView Network Node Manager OV NNM running Apache. These vulnerabilities could be exploited remotely resulting in cross...

HP-UX PHSS_37197 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)

s700800 11.11 OV ITO7.1X JavaGUI client A.08.27 : Potential security vulnerabilities have been identified in OpenView Operations OVO running on HP-UX and Solaris. These vulnerabilities may be exploited remotely to gain unauthorized access or to create a Denial of Service DoS. References: SUN Aler...

HP-UX PHSS_37182 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)

s700800 11.X OV OVO8.X IA-64 JavaGUI client A.08.27 : Potential security vulnerabilities have been identified in OpenView Operations OVO running on HP-UX and Solaris. These vulnerabilities may be exploited remotely to gain unauthorized access or to create a Denial of Service DoS. References: SUN...

HP-UX PHSS_35457 : HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution (HPSBMA02239 SSRT061260 rev.3)

s700800 11.X OV OVO8.X Core Agt Tru64 A.08.17 : A potential security vulnerability has been identified in HP OpenView Operations OVO Agents running Shared Trace Service. The vulnerability could be remotely exploited to execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. T...

HP-UX PHSS_37183 : HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (HPSBMA02288 SSRT071465 rev.1)

s700800 11.X OV OVO8.X PARISC JavaGUI client A.08.27 : Potential security vulnerabilities have been identified in OpenView Operations OVO running on HP-UX and Solaris. These vulnerabilities may be exploited remotely to gain unauthorized access or to create a Denial of Service DoS. References: SUN...

HP OpenView Client Configuration Manager Default Credentials

The remote host is running HP OpenView Client Configuration Manager OVCCM, a PC software configuration management application. The remote installation of OVCCM is configured to use default credentials to control access. Knowing these, an attacker can gain control of the affected application...

ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability

ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-060.html October 23, 2007 -- CVE ID: CVE-2007-5413 -- Affected Vendor: Hewlett-Packard -- Affected Products: HP OpenView Radia Integration Server -- TippingPointT...

HP OpenView Radia Integration Server directory traversal

It's possible to access different directories by using constructions like root in TCP/3465 webserver...

Hewlett-Packard OpenView Radia Integration Server File System Exposure Vulnerability

This vulnerability allows remote attackers to access arbitrary files on systems with vulnerable installations of Hewlett-Packard OpenView Radia Integration Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HTTP server bound by default to TCP...

CVE-2007-5413

httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...

CVE-2007-5413

HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...

CVE-2007-5413

httpd.tkd in Radia Integration Server in Hewlett-Packard HP OpenView Configuration Management CM Infrastructure 4.0 through 4.2i and Client Configuration Manager CCM 2.0 allows remote attackers to read arbitrary files via URLs containing tilde references to home directories, as demonstrated by ro...

CVE-2003-1494

The CVE-2003-1494 issue affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. A remote attacker can cause a denial of service via a crafted TCP packet, resulting in CPU consumption. The available documents describe the vulnerability and impact but do not provide a remediation or pa...

CVE-2003-1493

CVE-2003-1493 affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. The issue is a memory leak in NNM that can be triggered by crafted TCP packets, leading to a denial of service via memory exhaustion. Exploitation status, affected platforms beyond 6.2/6.4, and a vendor patch/fix a...

CVE-2003-1494

Unspecified vulnerability in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service CPU consumption via a crafted TCP packet...

CVE-2003-1493

Memory leak in HP OpenView Network Node Manager NNM 6.2 and 6.4 allows remote attackers to cause a denial of service memory exhaustion via crafted TCP packets...

HP OpenView unauthorized access

HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM unauthorized access thorugh httpd.tkd...

HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management (CM) Infrastructure (Radia) and Client Configuration Manager (CCM) Running httpd.tkd, Remote Unauthorized Access to Data

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01205079 Version: 1 HPSBMA02279 SSRT071298 rev.1 - HP OpenView Configuration Management CM Infrastructure Radia and Client Configuration Manager CCM Running httpd.tkd,...