PT-2009-6065 · Hewlett Packard · Hp Openview Network Node Manager

Damian Frizza · Publicado 2009-11-19 · Atualizado 2009-11-24 · CVE-2009-3840

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a packet with an invalid Error Code field to the embedded database engine service.

Recommendations For versions 7.51 and 7.53, consider restricting access to the embedded database engine service to minimize the risk of exploitation until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2009-3840

Produtos afetados

Hp Openview Network Node Manager

Referências · 8

• 🔥 https://exploit-db.com/exploits/10176 · Exploit
• 🔥 http://securityfocus.com/bid/37046 · Exploit
• 🔥 https://exploit-db.com/exploits/10377 · Exploit
• http://coresecurity.com/content/openview_nnm_internaldb_dos · Nota
• http://seclists.org/fulldisclosure/2009/Nov/199 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3840 · Nota de Segurança
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980 · Aviso do Fabricante
• http://osvdb.org/60200 · Nota