PT-2000-1967 · Hewlett Packard · Hp Openview Network Node Manager

Published 2000-12-11 · Updated 2017-10-10 · CVE-2000-1058

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager (NNM) versions 6.1 and earlier

Description The issue is related to a buffer overflow in the OverView5 CGI program, which can be exploited by remote attackers to cause a denial of service. It is also possible for attackers to execute arbitrary commands in the SNMP service, specifically targeting the snmp.exe component. This problem is associated with the Java SNMP MIB Browser Object ID parsing.

Recommendations For HP OpenView Network Node Manager (NNM) versions 6.1 and earlier, consider disabling the OverView5 CGI program as a temporary workaround until a patch is available. Restrict access to the SNMP service to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2000-1058

Affected Products

Hp Openview Network Node Manager

References · 5

• 🔥 https://exploit-db.com/exploits/20239 · Exploit
• http://archives.neohapsis.com/archives/bugtraq/2000-09/0274.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-1058 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5282 · Note
• http://marc.info/?l=bugtraq&m=97004856403173&w=2 · Note