ID CVE-2009-3840
Summary The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.
References
Vulnerable Configurations
  • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
CVSS
Base: 5.0 (as of 24-11-2009 - 07:04)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 37046
fulldisc 20091117 CORE-2009-0814: HP Openview NNM 7.53 Invalid DB Error Code vulnerability
hp
  • HPSBMA02477
  • SSRT090177
misc http://www.coresecurity.com/content/openview_nnm_internaldb_dos
osvdb 60200
Last major update 24-11-2009 - 07:04
Published 19-11-2009 - 00:30
Last modified 24-11-2009 - 07:04
Back to Top