CVE-2000-0558: Buffer Overflow
Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm service (OVALARMSRV) on port 2345.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Hewlett Packard OpenView Network Node Manager (OVALARMSRV)from your environment.If the Alarm service (OVALARMSRV) is not required, uninstall or remove the OVALARMSRV component from affected systems.
- Configuration
Disable the Alarm service (OVALARMSRV) on systems running HP OpenView Network Node Manager to prevent remote exploitation via port 2345.
Hewlett Packard OpenView Network Node Manager OVALARMSRV (Alarm service) = disabled - Compensating control
Block or restrict access to TCP port 2345 (OVALARMSRV) at the network perimeter and internal firewalls; permit access only from trusted management hosts or networks.
- Operational
Investigate systems running OVALARMSRV for signs of compromise (unauthorized command execution) and perform recovery as needed; rotate credentials and rebuild hosts if compromise is confirmed.
Event History
Frequently Asked Questions
What is the severity of CVE-2000-0558?
CVE-2000-0558 is considered critical due to its potential to allow remote attackers to execute arbitrary commands.
How do I fix CVE-2000-0558?
To mitigate CVE-2000-0558, you should patch HP Openview Network Node Manager to the latest version that addresses this vulnerability.
What systems are affected by CVE-2000-0558?
CVE-2000-0558 specifically affects HP Openview Network Node Manager version 6.1.
Can CVE-2000-0558 be exploited without authentication?
Yes, CVE-2000-0558 can be exploited remotely without authentication, making it particularly dangerous.
What is the primary attack vector for CVE-2000-0558?
The primary attack vector for CVE-2000-0558 is through the Alarm service (OVALARMSRV) on port 2345.