HP OpenView Network Node Manager multiple security vulnerabilities
Published:		09.07.2008
Source:		BUGTRAQ
SecurityVulns ID:		9141
Type:		remote
Level:		6/10
Description:		Unauthorized access, code execution.

Affected:		HP : OpenView Network Node Manager 7.51
CVE:		CVE-2008-1697 (Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.51 allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.)
		CVE-2008-0068

Original document		HP, [security bulletin] HPSBMA02349 SSRT080043 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data (09.07.2008)
		HP, [security bulletin] HPSBMA02348 SSRT080033 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS) (09.07.2008)

Discuss:

Read or add your comments to this news (0 comments)