CVE-2007-6204

2007-12-1321:46:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.518

Percentile

97.6%

JSON

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

Affected configurations

Nvd

Node

hpopenview_network_node_managerMatch6.41

hpopenview_network_node_managerMatch7.0.1

hpopenview_network_node_managerMatch7.51

VendorProductVersionCPE
hpopenview_network_node_manager6.41cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*
hpopenview_network_node_manager7.0.1cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*
hpopenview_network_node_manager7.51cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	openview_network_node_manager	6.41	cpe:2.3:a:hp:openview_network_node_manager:6.41:::::::*
hp	openview_network_node_manager	7.0.1	cpe:2.3:a:hp:openview_network_node_manager:7.0.1:::::::*
hp	openview_network_node_manager	7.51	cpe:2.3:a:hp:openview_network_node_manager:7.51:::::::*