CVE-2008-0068: Path Traversal
First published: Wed Apr 16 2008(Updated: )
Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HP OpenView Network Node Manager | =7.51 | |
| HP OpenView Network Node Manager | =7.53 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://aluigi.altervista.org/adv/closedviewx-adv.txt
- http://www.securityfocus.com/bid/28745
- http://www.osvdb.org/44359
- http://secunia.com/secunia_research/2008-4/advisory/
- http://www.securitytracker.com/id?1019838
- http://secunia.com/advisories/29796
- http://www.securitytracker.com/id?1019839
- http://marc.info/?l=bugtraq&m=121553649611253&w=2
- http://www.securityfocus.com/archive/1/490771
- http://securityreason.com/securityalert/3814
- http://www.vupen.com/english/advisories/2008/1214/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41790
- http://www.securityfocus.com/archive/1/490834/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-0068?
CVE-2008-0068 is classified as a medium severity vulnerability due to its ability to allow unauthorized file access.
How do I fix CVE-2008-0068?
To fix CVE-2008-0068, it is recommended to upgrade to the latest version of HP OpenView Network Node Manager that addresses this vulnerability.
What systems are affected by CVE-2008-0068?
CVE-2008-0068 affects versions 7.01, 7.51, and 7.53 of HP OpenView Network Node Manager.
What kind of attack is possible with CVE-2008-0068?
CVE-2008-0068 allows remote attackers to exploit a directory traversal vulnerability to read arbitrary files on the server.
Is CVE-2008-0068 still a concern for users of HP OpenView?
Yes, CVE-2008-0068 remains a concern unless users have applied the necessary patches or upgrades.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/hp
- canonical/hp openview network node manager
- version/hp openview network node manager/7.51
- version/hp openview network node manager/7.53