CVE-2009-0720

HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53 are affected by CVE-2009-0720, a remote code execution vulnerability via unspecified vectors. Connected sources indicate HP-UX patches PHSS_39246/PHSS_39245 (and equivalent patches for Linux, Solaris, Windows, PA/RH) to resol...

CVE-2009-0920

CVE-2009-0920 affects HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, 7.53. It is a stack-based buffer overflow in Toolbar.exe triggered by a crafted OvOSLocale cookie, enabling remote code execution. Public materials (Metasploit exploits and CIRCL sightings) confirm vulnerable builds inclu...

CVE-2009-0920

Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067...

CVE-2009-0921

HP OpenView Network Node Manager (OV NNM) vulnerable to CVE-2009-0921 via heap-based buffer overflows in OvCgi/Toolbar.exe (ov.dll, ovwww.dll) and related components. Affects OV NNM versions 7.01, 7.51, and 7.53. Exploitation involves sending a long OvAcceptLang cookie or a long Accept-Language H...

CVE-2008-4560

HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via 1 a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or 2 a crafted parameter in a request to the ovlaunch.exe CGI program,...

Design/Logic Flaw

HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the 1 webappmon.exe or 2 OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205...

Buffer overflow

Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...

Design/Logic Flaw

HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to obtain sensitive information via 1 a crafted request to the nnmRptConfig.exe CGI program, which reveals the pathname of log directories; or 2 a crafted parameter in a request to the ovlaunch.exe CGI program,...

CVE-2008-4562

CVE-2008-4562 describes a buffer overflow in the HP OpenView Network Node Manager (OV NNM) ovlaunch CGI on Windows, enabling remote code execution via a crafted Host parameter in OV NNM versions 7.01, 7.51, and 7.53. Multiple connected sources (Red Hat advisories and HP patch notes in the Nessus ...

CVE-2008-4560

CVE-2008-4560 affects HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53. The vulnerability is an information disclosure in which remote attackers can obtain sensitive details via: (1) a crafted request to nnmRptConfig.exe CGI, revealing log directory pathnames; and (2) a cra...

CVE-2008-4559

HP OpenView Network Node Manager (OV NNM) versions 7.01, 7.51, and 7.53 are affected by CVE-2008-4559. The issue allows remote code execution via shell metacharacters in argument fields passed to the CGI programs webappmon.exe or OpenView5.exe. This is a remote, unauthenticated vector that could ...

[Full-disclosure] iDefense Security Advisory 02.06.09: HP Network Node Manager ovlaunch CGI BSS Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 02.06.09 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 06, 2009 I. BACKGROUND HP Network Node Manager NNM is an application suite that is used to map out and manage network topography. NNM runs on a variety of...

CVE-2008-0067

HP OpenView Network Node Manager (OV NNM) contains a CGI buffer overflow in Toolbar.exe (and related CGI programs) that allows remote code execution via crafted HTTP requests. CVE-2008-0067 affects OV NNM versions referenced in the records (notably 7.50/7.53) and has been demonstrated in Metasplo...

CVE-2008-3545

CVE-2008-3545 affects HP OpenView Network Node Manager (OV NNM) via the ovtopmd component in OV NNM 7.01, 7.51 and 7.53. The description indicates a remote DoS via unknown vectors, and the issue is listed alongside other CVEs (e.g., 2008-3536/3537/3544). Connected advisories show HP patch content...

CVE-2008-3544

HP OpenView Network Node Manager (OV NNM) vulnerable via ovalarmsrv on several versions (7.01/7.51/7.53). CVE-2008-3544 describes multiple stack-based buffer overflows exploitable remotely by long requests to port 2954 (REQUEST_SEV_CHANGE, REQUEST_SAVE_STATE, REQUEST_RESTORE_STATE). Connected pat...

Design/Logic Flaw

Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3537...

CVE-2008-3536

Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3537...

CVE-2008-3536

CVE-2008-3536 affects HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 where ovalarmsrv is the vulnerable component. The vulnerability allows remote denial of service via unknown vectors (per the CVE description). HP’s security bulletin HPSBMA02362 lists remediation: patches/phases ...

CVE-2008-3537

HP OpenView Network Node Manager (OV NNM) v7.01, v7.51, and v7.53 contains an unspecified vulnerability in ovalarmsrv that can be exploited remotely to cause a Denial of Service. HP’s security bulletin and accompanying patch notes indicate remediation via patches PHSS_38488/PHSS_38489 or subseque...

[security bulletin] HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01537275 Version: 1 HPSBMA02362 SSRT080044, SSRT080045 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be...