Back to CVE Browser

CVE-2008-1697

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0640%

EPSS Percentile13.89th

PublishedApr 8, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.

Affected Platforms (CPE)

📦

Hp

Openview Network Node Manager

<= 7.53

📦

Hp

Openview Network Node Manager

= 7.0.1

📦

Hp

Openview Network Node Manager

= 7.51

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=121553626110871&w=2

🔗 http://secunia.com/advisories/29641

🔗 http://www.offensive-security.com/0day/hp-nnm-ov.py.txt

🔗 http://www.securityfocus.com/bid/28569

🔗 http://www.securitytracker.com/id?1019782

🔗 http://www.vupen.com/english/advisories/2008/1085/references

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41600

🔗 https://www.exploit-db.com/exploits/5342

Related Vulnerabilities

CVE-2001-055210.0

ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrar...

CVE-2001-062910.0

HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition ...

CVE-2000-055810.0

Buffer overflow in HP Openview Network Node Manager 6.1 allows remote attackers to execute arbitrary commands via the Alarm servic...

CVE-2007-620410.0

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to ...