CVE-2009-4176: Buffer Overflow
Published Dec 10, 2009
·Updated
Multiple heap-based buffer overflows in ovsessionmgr.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter to ovlogin.exe.
Affected Software
12 affected components
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.51
Remediation
Patch Available
Event History
Dec 10, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4176?
CVE-2009-4176 is considered a critical vulnerability due to its potential for remote code execution.
2
Which software versions are affected by CVE-2009-4176?
CVE-2009-4176 affects HP OpenView Network Node Manager versions 7.0.1, 7.51, and 7.53 across multiple operating systems.
3
How do I fix CVE-2009-4176?
To mitigate CVE-2009-4176, upgrade to the latest version of HP OpenView Network Node Manager that addresses this vulnerability.
4
What type of vulnerability is CVE-2009-4176?
CVE-2009-4176 is classified as a heap-based buffer overflow vulnerability.
5
What can attackers achieve with CVE-2009-4176?
CVE-2009-4176 allows remote attackers to execute arbitrary code on the affected systems.