CVE-2008-1697

published 2008-04-08

CVE-2008-1697: Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

EXPLOIT

Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
hp	openview_network_node_manager	<= 7.53	—
hp	openview_network_node_manager	—	—
hp	openview_network_node_manager	—	—

CWE-119