CVE-2008-0067

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

63.42% chance of exploitation in the next 30 days, 99th percentile

Published

2009-01-08

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_nnm_toolbar_01.rb

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16795

References

• CVE Record
• NVD entry

Related

• CVE-2008-0065
• CVE-2008-0068
• CVE-2008-0026
• CVE-2008-0069
• CVE-2008-0016
• CVE-2008-0071