CyberSec.Space Logo
Back to CVE Browser

CVE-2009-3846

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1620%
EPSS Percentile34.42th
PublishedDec 10, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.

Affected Platforms (CPE)

📦
Hp

Openview Network Node Manager

= 7.0.1
📦
Hp

Openview Network Node Manager

= 7.0.1
📦
Hp

Openview Network Node Manager

= 7.0.1
📦
Hp

Openview Network Node Manager

= 7.0.1
📦
Hp

Openview Network Node Manager

= 7.51
📦
Hp

Openview Network Node Manager

= 7.51
📦
Hp

Openview Network Node Manager

= 7.51
📦
Hp

Openview Network Node Manager

= 7.51
📦
Hp

Openview Network Node Manager

= 7.53
📦
Hp

Openview Network Node Manager

= 7.53
📦
Hp

Openview Network Node Manager

= 7.53
📦
Hp

Openview Network Node Manager

= 7.53

References & Advisories

🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-09-08
🔗 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
🔗 http://marc.info/?l=bugtraq&m=126046355120442&w=2
🔗 http://www.securityfocus.com/archive/1/508350/100/0/threaded
🔗 http://www.securityfocus.com/bid/37261
🔗 http://www.securityfocus.com/bid/37295
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/54658
🔗 http://dvlabs.tippingpoint.com/advisory/TPTI-09-08

Related Vulnerabilities

CVE-2001-055210.0

ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrar...

CVE-2001-062910.0

HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition ...

CVE-2000-055810.0

Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm servic...

CVE-2007-620410.0

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to ...