CVE-2009-0920

CVE-2009-0920 affects HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, 7.53. It is a stack-based buffer overflow in Toolbar.exe triggered by a crafted OvOSLocale cookie, enabling remote code execution. Public materials (Metasploit exploits and CIRCL sightings) confirm vulnerable builds inclu...

CVE-2009-0921

HP OpenView Network Node Manager (OV NNM) vulnerable to CVE-2009-0921 via heap-based buffer overflows in OvCgi/Toolbar.exe (ov.dll, ovwww.dll) and related components. Affects OV NNM versions 7.01, 7.51, and 7.53. Exploitation involves sending a long OvAcceptLang cookie or a long Accept-Language H...

CVE-2007-0819

CVE-2007-0819 affects HP Network Node Manager (NNM) Remote Console on Windows, specifically versions 7.50, 7.51, and 7.53. The root cause is that the Remote Console assigns Everyone Full Control permissions to the %PROGRAMFILES%\HP OpenView directory tree, enabling local users to escalate privile...

CVE-2010-0445

HP Network Node Manager (NNM) 8.10–8.13 on HP-UX, Linux, Solaris, and Windows is affected by CVE-2010-0445. The vulnerability enables remote execution of arbitrary commands via unknown vectors (high severity, CVSS v2 base score 10.0). HP's Security Bulletin HPSBMA02484/SRRT090076 indicates affect...