CVE-2007-6204

EPSS 69.6%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 69.6%KEV nãoPoC públicaNuclei —Metasploit simPatch referenciado

Lifecycle

06 Dec 2007Metasploit module available

13 Dec 2007Published on NVD

09 May 2010Public PoC

Weaponization speed

877 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/16805unverified cve_referencewww.exploit-db.com/exploits/4724unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 http://secunia.com/advisories/27964 http://securityreason.com/securityalert/3441 https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 https://www.exploit-db.com/exploits/4724 http://www.securityfocus.com/archive/1/484704/100/0/threaded http://www.securityfocus.com/bid/26741 http://www.securitytracker.com/id?1019055 http://www.vupen.com/english/advisories/2007/4111 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html