ID CVE-2008-0212
Summary ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.
References
Vulnerable Configurations
  • cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.00:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.11:*:*:*:*:*:*:*
  • cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*
    cpe:2.3:o:hp:hp-ux:11.23:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
  • cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
    cpe:2.3:o:sun:solaris:*:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*
    cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 15-10-2018 - 21:58)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:C
refmap via4
bid 27629
hp
  • HPSBMA02307
  • SSRT071420
idefense 20080204 Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability
sectrack 1019306
secunia 28798
vupen ADV-2008-0424
Last major update 15-10-2018 - 21:58
Published 06-02-2008 - 21:00
Last modified 15-10-2018 - 21:58
Back to Top