CVE-2005-2773

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

74.59% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2022-03-25

Published

2005-09-02

Updated

2025-10-22

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openview_connectedno…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16887
• https://www.exploit-db.com/exploits/1188

Security advisories

• https://exchange.xforce.ibmcloud.com/vulnerabilities/21999
• http://marc.info/?l=bugtraq&m=112499121725662&w=2
• http://www.securityfocus.com/bid/14662

References

• CVE Record
• NVD entry