PT-2001-1754 · Hewlett Packard+1 · Hp Openview Network Node Manager+1

Publicado 2001-08-29 · Atualizado 2016-10-18 · CVE-2001-0552

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: HP OpenView Network Node Manager (NNM) version 6.1 Tivoli Netview versions 5.x through 6.x

Description: The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. This is related to the ovactiond component.

Recommendations: For HP OpenView Network Node Manager (NNM) version 6.1, update the software to remove the vulnerability. For Tivoli Netview versions 5.x through 6.x, update the software to remove the vulnerability. As a temporary workaround, consider restricting access to the ovactiond component to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2001-0552

Produtos afetados

Hp Openview Network Node Manager

Tivoli Netview

Referências · 6

• 🔥 http://securityfocus.com/bid/2845 · Exploit
• 🔥 https://exploit-db.com/exploits/20909 · Exploit
• http://cert.org/advisories/CA-2001-24.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2001-0552 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=99201278704545&w=2 · Nota
• http://kb.cert.org/vuls/id/952171 · Correção