CVE-2008-1853

The ovtopmd service in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service exit by sending a 0x36 packet exit request...

CVE-2008-0068

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter...

CVE-2008-1853

CVE-2008-1853 affects the HP OpenView Network Node Manager (OV NNM) product line. The vulnerability is in the ovtopmd service for OV NNM versions 7.51, 7.53, and possibly other versions, where remote attackers can cause a denial of service by sending a 0x36 packet (exit request). The NVD entry li...

CVE-2008-0068

CVE-2008-0068 describes a directory traversal vulnerability in HP OpenView Network Node Manager (OV NNM) OpenView5.exe, affecting OV NNM versions 7.01, 7.51, and 7.53. The vulnerability allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter. HP’s...

CVE-2008-1851

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service hang via certain requests that do not provide all required arguments...

CVE-2008-1852

HP OpenView Network Node Manager (OV NNM) affected: ovalarmsrv in versions 7.51 and 7.53 (and possibly others) is vulnerable to remote DoS. A request that specifies a large number of sub-arguments can trigger a NULL pointer dereference due to memory allocation failure, leading to a crash. The pro...

CVE-2008-1852

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service crash via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure...

Integer overflow

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

CVE-2008-1842

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

CVE-2008-1842

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

CVE-2008-1842

The CVE-2008-1842 issue affects HP OpenView Network Node Manager (OV NNM) v8.01 and earlier (7.53 and older), where ovspmd.exe mishandles a long TCP request to port 8886. The described integer signedness error can cause a heap-based buffer overflow, enabling a remote attacker to crash the daemon ...

CVE-2008-1842: Undefined Security Weakness

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager OV NNM 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service daemon crash or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a...

CVE-2008-1853: Undefined Security Weakness

The ovtopmd service in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service exit by sending a 0x36 packet exit request...

CVE-2008-0068: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter...

CVE-2008-1852: Undefined Security Weakness

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service crash via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure...

CVE-2008-1851: Undefined Security Weakness

ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service hang via certain requests that do not provide all required arguments...

HP OpenView网络节点管理器OVAS.EXE远程栈溢出漏洞

BUGTRAQ ID: 28569 CVECAN ID: CVE-2008-1697 HP OpenView网络节点管理器（OV NNM）是HP公司开发和维护的网络管理系统软件，具有强大的网络节点管理功能。 OV NNM的ovwparser.dll库存在栈溢出漏洞，如果向默认运行在7510/TCP端口上的ovas.exe服务发送了超长的topology/homeBaseView HTTP GET请求的话，就可以触发这个溢出，导致执行任意指令。 HP OpenView Network Node Manager 7.51 厂商补丁： HP --...

HP OpenView Network Node Manager multiple CGI buffer overflow

Buffer overflows in ovlogin.exe, OpenView5.exe, snmpviewer.exe, webappmon.exe. OpenView5.exe directory traversal...

Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal

====================================================================== Secunia Research 14/04/2008 - HP OpenView Network Node Manager OpenView5.exe Directory Traversal - ====================================================================== Table of Contents Affected...

HP OpenView Network Node Manager OpenView5.exe Action Parameter Traversal Arbitrary File Access

The version of HP OpenView Network Node Manager installed on the remote host fails to completely sanitize user input to the 'Action' parameter of the 'OpenView5.exe' CGI script. Using a value with directory traversal sequences containing slashes rather than backslashes, an unauthenticated, remote...