peter bassill · operator
$ cve CVE-2009-3849 JSON

CVE-2009-3849 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 73.7% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS73.69% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2009-12-10
Last modified2026-06-16

Affected (1)

VendorProduct
hpopenview network node manager

Public exploits

SourceTitleDate
exploit-dbHP OpenView Network Node Manager (OV NNM) - 'Snmp.exe' CGI Buffer Overflow (Metasploit)2010-11-11

References

→ the Explorer  ·  watch your stack  ·  NVD