Vulnerability Details : CVE-2009-3845
The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
Exploit prediction scoring system (EPSS) score for CVE-2009-3845
Probability of exploitation activity in the next 30 days: 2.54%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 89 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-3845
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
nvd@nist.gov |
References for CVE-2009-3845
-
http://zerodayinitiative.com/advisories/ZDI-09-094/
-
http://www.securityfocus.com/bid/37300
-
http://www.securityfocus.com/archive/1/508345/100/0/threaded
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/54651
- http://marc.info/?l=bugtraq&m=126046355120442&w=2
- http://www.securityfocus.com/bid/37261
-
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
Patch;Vendor Advisory
Products affected by CVE-2009-3845
- cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*