CVE-2008-0067: Buffer Overflow
First published: Thu Jan 08 2009(Updated: )
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.51 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/33147
- http://secunia.com/secunia_research/2008-13/
- http://securitytracker.com/id?1021521
- http://secunia.com/advisories/28074
- http://securityreason.com/securityalert/4885
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://securityreason.com/securityalert/8307
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-0067?
CVE-2008-0067 is a critical vulnerability with a high severity rating due to its ability to allow remote code execution.
How do I fix CVE-2008-0067?
To fix CVE-2008-0067, you should update HP OpenView Network Node Manager to a patched version that addresses this vulnerability.
Which versions of HP OpenView Network Node Manager are affected by CVE-2008-0067?
CVE-2008-0067 affects HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53.
What type of vulnerability is CVE-2008-0067?
CVE-2008-0067 is classified as a stack-based buffer overflow vulnerability.
What can an attacker do with CVE-2008-0067?
An attacker exploiting CVE-2008-0067 can execute arbitrary code on the affected system remotely.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/7.51