PT-2008-3373 · Hewlett Packard · Hp Openview Network Node Manager

Publicado 2008-04-16 · Atualizado 2018-10-11 · CVE-2008-1842

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager (OV NNM) versions 7.53 and earlier HP OpenView Network Node Manager (OV NNM) version 8.01

Description The issue is caused by an integer signedness error in ovspmd.exe, which allows remote attackers to cause a denial of service or execute arbitrary code via a long request to TCP port 8886. The request must begin with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.

Recommendations For HP OpenView Network Node Manager (OV NNM) versions 7.53 and earlier, update to a version later than 7.53 to resolve the issue. For HP OpenView Network Node Manager (OV NNM) version 8.01, update to a version later than 8.01 to resolve the issue. As a temporary workaround, consider restricting access to TCP port 8886 to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-1842

Produtos afetados

Hp Openview Network Node Manager

Referências · 11

• 🔥 https://exploit-db.com/exploits/31629 · Exploit
• 🔥 http://aluigi.org/poc/closedview.zip · Exploit
• http://vupen.com/english/advisories/2008/1159 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1842 · Nota de Segurança
• http://securitytracker.com/id?1019821 · Nota
• http://securityfocus.com/bid/28689 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41737 · Nota
• http://securityfocus.com/archive/1/493781/100/0/threaded · Aviso do Fabricante
• http://secunia.com/advisories/29713 · Aviso do Fabricante
• http://aluigi.altervista.org/adv/closedview-adv.txt · Nota
• http://marc.info/?l=bugtraq&m=121321155405849&w=2 · Aviso do Fabricante