CVE-2005-2773 : HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to exe

HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

Published 2005-09-02 23:03:00

Updated 2025-01-15 23:34:15

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2005-2773

HP » Openview Network Node Manager
Versions from including (>=) 6.2 and up to, including, (<=) 7.50
cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*
Matching versions

CVE-2005-2773 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

HP OpenView Network Node Manager Remote Code Execution Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

HP OpenView Network Node Manager could allow a remote attacker to execute arbitrary commands on the system.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2005-2773

Added on 2022-03-25 Action due date 2022-04-15

Exploit prediction scoring system (EPSS) score for CVE-2005-2773

EPSS FAQ

94.52%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2005-2773

HP Openview connectedNodes.ovpl Remote Command Execution

Disclosure Date: 2005-08-25

First seen: 2020-04-26

exploit/unix/webapp/openview_connectednodes_exec

This module exploits an arbitrary command execution vulnerability in the HP OpenView connectedNodes.ovpl CGI application. The results of the command will be displayed to the screen. Authors: - Valerio Tesei <valk@mojodo.it> - hdm <x@hdm.io>

More information

CVSS scores for CVE-2005-2773

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST	2024-07-16
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2005-2773

http://secunia.com/advisories/16555/

About Secunia Research | Flexera
Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/21999

HP Openview Network Node Manager shell metacharacter command execution CVE-2005-2773 Vulnerability Report
Third Party Advisory
http://marc.info/?l=bugtraq&m=112499121725662&w=2

'Portcullis Security Advisory 05-014 HP Openview Remote Command' - MARC
Exploit;Issue Tracking;Mailing List
http://www.securityfocus.com/bid/14662

HP OpenView Network Node Manager Multiple Remote Command Execution Vulnerabilities
Broken Link
http://www.securityfocus.com/advisories/9150

Broken Link

Jump to