CVE-2009-4178: Buffer Overflow
Published Dec 10, 2009
·Updated
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.
Affected Software
12 affected components
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.0.1
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.51
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Hewlett Packard OpenView Network Node Manager=7.53
Remediation
Patch Available
Event History
Dec 10, 2009
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-4178?
CVE-2009-4178 is classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2009-4178?
To fix CVE-2009-4178, users should update HP OpenView Network Node Manager to the latest version available from HP.
3
What types of systems are affected by CVE-2009-4178?
CVE-2009-4178 affects HP OpenView Network Node Manager versions 7.0.1, 7.51, and 7.53 on various platforms including Windows, Solaris, and Linux.
4
Can CVE-2009-4178 be exploited remotely?
Yes, CVE-2009-4178 can be exploited remotely due to a vulnerability in the Topic parameter.
5
What are the potential consequences of an exploit of CVE-2009-4178?
Exploitation of CVE-2009-4178 could allow an attacker to execute arbitrary code on the affected system.