CVE-2008-0067

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 63%

from disclosure to weapon486 days

Published on NVDJan 8

1st PoC+486d

metasploitJan 7

exploitation probability

63%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16795unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=123247393715913&w=2 http://secunia.com/advisories/28074 http://secunia.com/secunia_research/2008-13/http://securityreason.com/securityalert/4885 http://securityreason.com/securityalert/8307 http://securitytracker.com/id?1021521 http://www.securityfocus.com/archive/1/499826/100/0/threaded http://www.securityfocus.com/bid/33147