CVE-2009-1420: Buffer Overflow
First published: Thu Jun 11 2009(Updated: )
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Hewlett Packard OpenView Network Node Manager | =7.51 | |
| Hewlett Packard OpenView Network Node Manager | =7.51 | |
| Hewlett Packard OpenView Network Node Manager | =7.51 | |
| Hewlett Packard OpenView Network Node Manager | =7.51 | |
| Hewlett Packard OpenView Network Node Manager | =7.53 | |
| Hewlett Packard OpenView Network Node Manager | =7.53 | |
| Hewlett Packard OpenView Network Node Manager | =7.53 | |
| Hewlett Packard OpenView Network Node Manager | =7.53 | |
| HP Open View Network Node Manager (HP OpenView NNM) | =1.30.000 | |
| HP Open View Network Node Manager (HP OpenView NNM) | =1.30.000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2009-1420?
CVE-2009-1420 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2009-1420?
To fix CVE-2009-1420, upgrade HP OpenView Network Node Manager to version 7.54 or later.
What versions of HP OpenView Network Node Manager are affected by CVE-2009-1420?
HP OpenView Network Node Manager versions 7.51 and 7.53 are affected by CVE-2009-1420.
Can CVE-2009-1420 cause a denial of service?
Yes, CVE-2009-1420 can lead to a denial of service condition due to the stack-based buffer overflow.
Which components are involved in CVE-2009-1420?
CVE-2009-1420 involves the rping component when used with SNMP and MIB in HP OpenView Network Node Manager.
- collector/nvd-historical
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/hp
- canonical/hewlett packard openview network node manager
- version/hewlett packard openview network node manager/7.51
- version/hewlett packard openview network node manager/7.53
- canonical/hp open view network node manager (hp openview nnm)
- version/hp open view network node manager (hp openview nnm)/1.30.000