PT-2009-1195 · Hewlett Packard · Hp Openview Network Node Manager

Publicado 2009-04-28 · Atualizado 2018-10-11 · CVE-2008-2438

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.01, 7.51, and 7.53

Description The issue is related to an integer overflow in the ovalarmsrv.exe component, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a crafted command to TCP port 2954, triggering a heap-based buffer overflow.

Recommendations For HP OpenView Network Node Manager version 7.01, update to a version that fixes the integer overflow issue in ovalarmsrv.exe. For HP OpenView Network Node Manager version 7.51, update to a version that fixes the integer overflow issue in ovalarmsrv.exe. For HP OpenView Network Node Manager version 7.53, update to a version that fixes the integer overflow issue in ovalarmsrv.exe.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2008-2438

Produtos afetados

Hp Openview Network Node Manager

Referências · 7

• http://securityfocus.com/bid/34738 · Correção
• http://secunia.com/secunia_research/2008-38 · Aviso do Fabricante
• http://securityfocus.com/archive/1/503039/100/0/threaded · Nota
• http://osvdb.org/54107 · Nota
• http://securityfocus.com/archive/1/503024 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1187 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-2438 · Nota de Segurança