HP : Security Vulnerabilities, CVEs, Published In March 2009 (Code Execution)
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.
Max CVSS
10.0
EPSS Score
5.63%
Published
2009-03-25
Updated
2018-10-10
CVE-2009-0920
Public exploit
Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.
Max CVSS
7.5
EPSS Score
74.94%
Published
2009-03-25
Updated
2018-10-10
2 vulnerabilities found