CVE-2009-4178 Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.
HighCVSS 10.0
EPSS 74.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Heap-based buffer overflow in OvWebHelp.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long Topic parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc openview network node manager | = 7.0.1 | No fix listed |
| HP Inc openview network node manager | = 7.51 | No fix listed |
| HP Inc openview network node manager | = 7.53 | No fix listed |
References
- dvlabs.tippingpoint.com patch
- SSRT090133 patch vendor-advisory
- SSRT090257 vendor-advisory
- 20091209 TPTI-09-11: HP OpenView NNM OvWebHelp.exe CGI Topic Heap Overflow Vulnerability mailing-list
- 37261 vdb-entry
- 37340 vdb-entry
- hp-ovnnm-ovwebhelp-bo(54659) vdb-entry