CVE-2000-1058: Buffer Overflow

Published Dec 11, 2000

Updated

Buffer overflow in OverView5 CGI program in HP OpenView Network Node Manager (NNM) 6.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, in the SNMP service (snmp.exe), aka the "Java SNMP MIB Browser Object ID parsing problem."

Affected Software

3 affected components

Hewlett Packard OpenView Network Node Manager=4.11

Hewlett Packard OpenView Network Node Manager=5.01

Hewlett Packard OpenView Network Node Manager=6.1

Remediation

Patch Available

http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html

Event History

Dec 11, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1058?

CVE-2000-1058 is considered as a critical vulnerability due to its potential to allow remote attackers to execute arbitrary commands.

How do I fix CVE-2000-1058?

To address CVE-2000-1058, update the HP OpenView Network Node Manager to a patched version that corrects the buffer overflow issue.

What types of attacks can CVE-2000-1058 facilitate?

CVE-2000-1058 can facilitate denial of service and may allow remote execution of arbitrary commands.

Which versions of HP OpenView Network Node Manager are affected by CVE-2000-1058?

CVE-2000-1058 affects versions 4.11, 5.01, and 6.1 of HP OpenView Network Node Manager.

What component is primarily exploited in CVE-2000-1058?

The primary exploit in CVE-2000-1058 is a buffer overflow in the OverView5 CGI program.