[security bulletin] HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager (NNM) Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01817357 Version: 1 HPSBMA02448 SSRT061231 rev.1 - HP Network Node Manager NNM Remote Console Running on Windows, Local Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information ...

CVE-2007-0819

CVE-2007-0819 affects HP Network Node Manager (NNM) Remote Console on Windows, specifically versions 7.50, 7.51, and 7.53. The root cause is that the Remote Console assigns Everyone Full Control permissions to the %PROGRAMFILES%\HP OpenView directory tree, enabling local users to escalate privile...