Vulnerability Details : CVE-2008-0067
Public exploit exists!
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Vulnerability category: Execute code
Products affected by CVE-2008-0067
- cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-0067
74.62%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2008-0067
-
HP OpenView Network Node Manager Toolbar.exe CGI Buffer Overflow
Disclosure Date: 2009-01-07First seen: 2020-04-26exploit/windows/http/hp_nnm_toolbar_01This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request to Toolbar.exe, an attacker may be able to execute arbitrary code. Authors: - MC <mc@metasploit.com>
CVSS scores for CVE-2008-0067
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2008-0067
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-0067
-
http://secunia.com/secunia_research/2008-13/
Vendor Advisory
-
http://securitytracker.com/id?1021521
-
http://securityreason.com/securityalert/4885
-
http://secunia.com/advisories/28074
Vendor Advisory
-
http://securityreason.com/securityalert/8307
-
http://www.securityfocus.com/bid/33147
HP OpenView Network Node Manager HTTP Request Multiple Buffer Overflow Vulnerabilities
-
http://marc.info/?l=bugtraq&m=123247393715913&w=2
-
http://www.securityfocus.com/archive/1/499826/100/0/threaded
Jump to