CVE-2007-0819
First published: Thu Feb 08 2007(Updated: )
HP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PROGRAMFILES%\HP OpenView directory tree, which allows local users to gain privileges via a Trojan horse executable file or ActiveX component, or a modified bin\ovtrcsvc.exe for the HP Open View Shared Trace Service.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP Network Node Manager i | =7.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0174.html
- http://securityvulns.com/news/HP/NNM/RC/WP.html
- http://www.securityfocus.com/bid/22475
- http://securitytracker.com/id?1017609
- http://secunia.com/advisories/24066
- http://osvdb.org/33130
- http://marc.info/?l=bugtraq&m=125063027228539&w=2
- http://www.vupen.com/english/advisories/2007/0533
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32362
Frequently Asked Questions
What is the severity of CVE-2007-0819?
CVE-2007-0819 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2007-0819?
To fix CVE-2007-0819, limit the access permissions for the %PROGRAMFILES%\HP OpenView directory tree to prevent unauthorized users from gaining control.
What versions of HP Network Node Manager are affected by CVE-2007-0819?
HP Network Node Manager versions 7.50, 7.51, and 7.53 are affected by CVE-2007-0819.
Can CVE-2007-0819 be exploited locally?
Yes, CVE-2007-0819 can be exploited locally by users with access to execute malicious files in the HP OpenView directory.
What types of attacks could be conducted using CVE-2007-0819?
CVE-2007-0819 could be exploited for privilege escalation through the execution of Trojan horse executables or altered ActiveX components.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- vendor/hp
- canonical/hp network node manager i
- version/hp network node manager i/7.5