Design/Logic Flaw

2009-02-0821:30:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.034 Low

EPSS

Percentile

91.4%

JSON

HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.

CPENameOperatorVersion
openview_network_node_managereq7.53 solaris
openview_network_node_managereq7.53 windows
openview_network_node_managereq7.0.1 hp-ux
openview_network_node_managereq7.51 solaris
openview_network_node_managereq7.51 windows
openview_network_node_managereq7.0.1 linux
openview_network_node_managereq7.0.1 solaris
openview_network_node_managereq7.53
openview_network_node_managereq7.51
openview_network_node_managereq7.53 linux

Name	Operator	Version
openview_network_node_manager	eq	7.53 solaris
openview_network_node_manager	eq	7.53 windows
openview_network_node_manager	eq	7.0.1 hp-ux
openview_network_node_manager	eq	7.51 solaris
openview_network_node_manager	eq	7.51 windows
openview_network_node_manager	eq	7.0.1 linux
openview_network_node_manager	eq	7.0.1 solaris
openview_network_node_manager	eq	7.53
openview_network_node_manager	eq	7.51
openview_network_node_manager	eq	7.53 linux