1514 matches found
Design/Logic Flaw
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the 1 webappmon.exe or 2 OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205...
Design/Logic Flaw
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via 1 a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or 2 a crafted parameter in a request to the ovlaunch.exe CGI program,...
Buffer overflow
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...
CVE-2008-4560
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via 1 a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or 2 a crafted parameter in a request to the ovlaunch.exe CGI program,...
CVE-2008-4559
HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53 are affected by CVE-2008-4559. The issue allows remote code execution via shell metacharacters in argument fields passed to the CGI programs webappmon.exe or OpenView5.exe. This is a remote, unauthenticated vector that could ...
CVE-2008-4559
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the 1 webappmon.exe or 2 OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205...
CVE-2008-4560
CVE-2008-4560 affects HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53. The vulnerability is an information disclosure in which remote attackers can obtain sensitive details via: (1) a crafted request to nnmRptConfig.exe CGI, revealing log directory pathnames; and (2) a cra...
CVE-2008-4562
CVE-2008-4562 describes a buffer overflow in the HP OpenView Network Node Manager (OV NNM) ovlaunch CGI on Windows, enabling remote code execution via a crafted Host parameter in OV NNM versions 7.01, 7.51, and 7.53. Multiple connected sources (Red Hat advisories and HP patch notes in the Nessus ...
CVE-2008-4562
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...
CVE-2008-4560: Exposure of Sensitive Information to an Unauthorized Actor
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via 1 a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or 2 a crafted parameter in a request to the ovlaunch.exe CGI program,...
CVE-2008-4562: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...
CVE-2008-4559: Improper Input Validation
HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the 1 webappmon.exe or 2 OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205...
[security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01661610 Version: 1 HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
HP OpenView Network Node Manager multiple security vulnerabilities
Multiple vulnerabilities in CGI interface...
HP OpenView Network Node Manager code execution
Information leakage, command injection...
HP OpenView Network Node Manager Toolbar.exe CGI Cookie Handling Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.0 and 7.53. By sending a CGI request with a specially OvOSLocale cookie to Toolbar.exe, an attacker may be able to execute arbitrary code. Please note that this module only works against a specific build i.e. NNM...
[security bulletin] HPSBMA02400 SSRT080144 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01646081 Version: 1 HPSBMA02400 SSRT080144 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...
HP OpenView Network Node Manager getcvdata.exe parameter string buffer overflow
Added: 01/14/2009 CVE: CVE-2008-0067 BID: 33147 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending an HTTP request for the getcvdata.exe C...
HP OpenView Network Node Manager getcvdata.exe parameter string buffer overflow
Added: 01/14/2009 CVE: CVE-2008-0067 BID: 33147 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability allows remote attackers to execute arbitrary commands by sending an HTTP request for the getcvdata.exe C...