PT-2000-1967 · Hewlett Packard · Hp Openview Network Node Manager

Publicado

2000-12-11

·

Atualizado

2017-10-10

·

CVE-2000-1058

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager (NNM) versions 6.1 and earlier
Description The issue is related to a buffer overflow in the OverView5 CGI program, which can be exploited by remote attackers to cause a denial of service. It is also possible for attackers to execute arbitrary commands in the SNMP service, specifically targeting the snmp.exe component. This problem is associated with the Java SNMP MIB Browser Object ID parsing.
Recommendations For HP OpenView Network Node Manager (NNM) versions 6.1 and earlier, consider disabling the OverView5 CGI program as a temporary workaround until a patch is available. Restrict access to the SNMP service to minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2000-1058

Produtos afetados

Hp Openview Network Node Manager