CVE-2008-3544: Buffer Overflow

Published Oct 13, 2008

Updated

Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUESTSEVCHANGE (aka number 47), (2) REQUESTSAVESTATE (aka number 61), or (3) REQUESTRESTORESTATE (aka number 62) request to TCP port 2954.

Affected Software

4 affected components

Hewlett Packard OpenView Network Node Manager=7.01

Hewlett Packard OpenView Network Node Manager=7.50

Hewlett Packard OpenView Network Node Manager=7.51

Hewlett Packard OpenView Network Node Manager=7.53

Event History

Oct 13, 2008

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3544?

CVE-2008-3544 is categorized as a high-severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2008-3544?

To fix CVE-2008-3544, upgrade HP OpenView Network Node Manager to the latest version which addresses this vulnerability.

What versions of HP OpenView Network Node Manager are affected by CVE-2008-3544?

CVE-2008-3544 affects HP OpenView Network Node Manager versions 7.01, 7.50, 7.51, and 7.53.

What type of attack does CVE-2008-3544 facilitate?

CVE-2008-3544 allows remote attackers to execute arbitrary code on the target system.

Is CVE-2008-3544 a local or remote vulnerability?

CVE-2008-3544 is a remote vulnerability, allowing attackers to exploit it over the network.