PT-2007-2262 · Hewlett Packard · Hp Openview+1

Published 2007-02-08 · Updated 2017-07-29 · CVE-2007-0819

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: HP Network Node Manager (NNM) Remote Console versions 7.50 through 7.53

Description: The issue allows local users to gain privileges via a Trojan horse executable file or ActiveX component, or a modified binovtrcsvc.exe for the HP Open View Shared Trace Service, due to the assignment of Everyone Full Control permission for the %PROGRAMFILES%HP OpenView directory tree.

Recommendations: For versions 7.50 through 7.53, consider restricting access to the %PROGRAMFILES%HP OpenView directory tree to prevent local users from gaining privileges. As a temporary workaround, avoid using the HP Open View Shared Trace Service until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2007-0819

Affected Products

Hp Network Node Manager (Nnm) Remote Console

Hp Openview

References · 10

• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0174.html · Exploit
• http://marc.info/?l=bugtraq&m=125063027228539&w=2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0819 · Security Note
• http://securityvulns.com/news/HP/NNM/RC/WP.html · Vendor Advisory
• http://secunia.com/advisories/24066 · Note
• http://securitytracker.com/id?1017609 · Note
• http://osvdb.org/33130 · Note
• http://securityfocus.com/bid/22475 · Note
• http://vupen.com/english/advisories/2007/0533 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32362 · Note