HP OpenView Network Node Manager code execution updated since 28.04.2009
Published:		07.05.2009
Source:		BUGTRAQ
SecurityVulns ID:		9878
Type:		remote
Level:		5/10
Description:		ovalarmsrv integer overflow

CVE:		CVE-2009-0720 (Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.)
		CVE-2008-2438 (Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow.)

Original document		HP, [security bulletin] HPSBMA02425 SSRT080091 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (07.05.2009)
		SECUNIA, Secunia Research: HP OpenView Network Node Manager "ovalarmsrv" Integer Overflow (29.04.2009)
		HP, [security bulletin] HPSBMA02424 SSRT080125 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (28.04.2009)

Discuss:

Read or add your comments to this news (0 comments)