CVE-2009-1420 : Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM

Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.

Published 2009-06-11 15:30:00

Updated 2009-07-11 05:30:22

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2009-1420

HP » Openview Network Node Manager » Version: 7.51 Windows Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.53 Hp-ux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.51 Linux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.53 Linux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.51 Solaris Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.53 Solaris Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.53 Windows Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000
HP » Openview Network Node Manager » Version: 7.51 Hp-ux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
Matching versions
When used together with: HP » Hpovnnm.hpovmib » Version: 1.30.000
When used together with: HP » Hpovnnm.hpovsnmp » Version: 1.30.000

Exploit prediction scoring system (EPSS) score for CVE-2009-1420

EPSS FAQ

58.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1420

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2009-1420

Jump to

Vulnerability Details : CVE-2009-1420

Products affected by CVE-2009-1420

Exploit prediction scoring system (EPSS) score for CVE-2009-1420

CVSS scores for CVE-2009-1420

References for CVE-2009-1420