CVE-2009-4177: Buffer Overflow
Published Dec 10, 2009
·Updated
Buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
Affected Software
12 affected components
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Remediation
Event History
Dec 10, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4177?
CVE-2009-4177 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2009-4177?
To fix CVE-2009-4177, upgrade to a patched version of HP OpenView Network Node Manager that addresses this vulnerability.
3
What versions of HP OpenView Network Node Manager are affected by CVE-2009-4177?
CVE-2009-4177 affects HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53.
4
Can CVE-2009-4177 be exploited remotely?
Yes, CVE-2009-4177 can be exploited remotely through a specially crafted HTTP Host header.
5
What are the potential consequences of exploiting CVE-2009-4177?
Exploiting CVE-2009-4177 could allow an attacker to execute arbitrary code on the affected system.