Vulnerability CVE-2008-3544
Published: 2008-10-13   Modified: 2012-02-12

Description:
Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954.

See advisories in our WLB2 database:
Topic
Author
Date
High
Multiple vulnerabilities in HP OpenView NNM 7.53
Luigi Auriemma
14.10.2008

Type:

CWE-119

 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9/10
8.5/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Complete
Affected software
HP -> Openview network node manager 

 References:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01537275
http://www.securityfocus.com/bid/28668
http://www.securityfocus.com/archive/1/490541
http://securityreason.com/securityalert/4397
http://secunia.com/advisories/31688
http://downloads.securityfocus.com/vulnerabilities/exploits/28668.c
http://aluigi.altervista.org/adv/closedview_old-adv.txt
Copyright 2024, cxsecurity.com

 

Back to Top