Vulnerability Details : CVE-2009-4181

Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe.

Vulnerability category: OverflowExecute code

Published 2009-12-10 22:30:01

Updated 2018-10-10 19:48:44

Source HP Inc.

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2009-4181

Probability of exploitation activity in the next 30 days: 83.09%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2009-4181

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-4181

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: [email protected] (Primary)

References for CVE-2009-4181

Products affected by CVE-2009-4181

HP » Openview Network Node Manager » Version: 7.0.1 Linux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:linux:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.0.1 Solaris Edition
cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:solaris:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.0.1 Hp Ux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:hp_ux:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.51 Windows Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.53 Hp-ux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.51 Linux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.53 Linux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.51 Solaris Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.53 Solaris Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.0.1 Windows Edition
cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.53 Windows Edition
cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
Matching versions
HP » Openview Network Node Manager » Version: 7.51 Hp-ux Edition
cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
Matching versions