CVE-2007-6204: Buffer Overflow
First published: Thu Dec 13 2007(Updated: )
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =6.41 | |
| HP OpenView Network Node Manager | =7.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-07-071.html
- http://www.securityfocus.com/bid/26741
- http://www.securitytracker.com/id?1019055
- http://secunia.com/advisories/27964
- http://securityreason.com/securityalert/3441
- http://www.vupen.com/english/advisories/2007/4111
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38892
- https://www.exploit-db.com/exploits/4724
- http://www.securityfocus.com/archive/1/484704/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-6204?
CVE-2007-6204 is classified as having high severity due to its potential for remote code execution.
How do I fix CVE-2007-6204?
To mitigate CVE-2007-6204, upgrade HP OpenView Network Node Manager to a patched version that resolves the buffer overflow vulnerabilities.
Which versions of HP OpenView Network Node Manager are affected by CVE-2007-6204?
CVE-2007-6204 affects HP OpenView Network Node Manager versions 6.41, 7.01, and 7.51.
What types of attacks are possible due to CVE-2007-6204?
CVE-2007-6204 allows remote attackers to execute arbitrary code on affected systems using specially crafted long arguments.
Who are the primary targets of CVE-2007-6204?
The primary targets of CVE-2007-6204 are organizations utilizing vulnerable versions of HP OpenView Network Node Manager.
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/6.41
- version/hp openview network node manager/7.0.1
- version/hp openview network node manager/7.51