CVE-2009-3846: Buffer Overflow
Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3846?
CVE-2009-3846 is considered a high-severity vulnerability due to the potential for remote code execution.
What systems are affected by CVE-2009-3846?
CVE-2009-3846 affects HP OpenView Network Node Manager versions 7.0.1, 7.51, and 7.53 on various platforms including Windows, Linux, and Solaris.
How do I fix CVE-2009-3846?
To mitigate CVE-2009-3846, upgrade to a patched version of HP OpenView Network Node Manager that addresses the heap-based buffer overflow.
What can attackers do with CVE-2009-3846?
Attackers exploiting CVE-2009-3846 can execute arbitrary code on the affected system by sending specially crafted input.
Is CVE-2009-3846 actively exploited in the wild?
While specific active exploitation details may vary, the nature of CVE-2009-3846 makes it a concerning vulnerability that organizations should take seriously.