CVE-2008-0067 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 63.4% (pctl 99)
Patch early
A public exploit exists.
Description
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 63.42% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2009-01-08 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| hp | openview network node manager |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | HP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Buffer Overflow (Metasploit) | 2010-05-09 |
References
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
- http://marc.info/?l=bugtraq&m=123247393715913&w=2
- http://secunia.com/advisories/28074
- http://secunia.com/secunia_research/2008-13/
- http://securityreason.com/securityalert/4885
- http://securityreason.com/securityalert/8307
- http://securitytracker.com/id?1021521
- http://www.securityfocus.com/archive/1/499826/100/0/threaded
- http://www.securityfocus.com/bid/33147
→ the Explorer · watch your stack · NVD