CVE-2009-0921: Buffer Overflow

Published Mar 25, 2009

Updated

Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.

Affected Software

3 affected components

HP Network Node Manager=7.0.1

HP Network Node Manager=7.5.1

HP Network Node Manager=7.5.3

Event History

Mar 25, 2009

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Data Sourced

via NVD·01:30 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0921?

CVE-2009-0921 is considered critical due to its ability to allow remote attackers to execute arbitrary code.

Which versions of HP OpenView Network Node Manager are affected by CVE-2009-0921?

CVE-2009-0921 affects HP OpenView Network Node Manager versions 7.0.1, 7.5.1, and 7.5.3.

How do I fix CVE-2009-0921?

To mitigate CVE-2009-0921, upgrade to a version of HP OpenView Network Node Manager that is not vulnerable.

What causes the vulnerability in CVE-2009-0921?

CVE-2009-0921 is caused by multiple heap-based buffer overflows triggered by long HTTP headers and cookies.

Can CVE-2009-0921 be exploited remotely?

Yes, CVE-2009-0921 can be exploited remotely by sending crafted requests to the affected software.