Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-3544

CWE-119 — Buffer Overflow4 documents4 sources
Severity
9.0CRITICAL
EPSS
36.7%
top 2.86%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
HP Openview Network Node Manager
Timeline
PublishedOct 13
Latest updateMay 2

Description

Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, and possibly 7.01, 7.50, and 7.53, allow remote attackers to execute arbitrary code via a long (1) REQUEST_SEV_CHANGE (aka number 47), (2) REQUEST_SAVE_STATE (aka number 61), or (3) REQUEST_RESTORE_STATE (aka number 62) request to TCP port 2954.

CVSS vector

AV:N/AC:L/C:P/I:P/A:CExploitability: 10.0 | Impact: 8.5

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-555m-5vqw-mv38: Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7↗2022-05-02
▶
CVEList
CVE-2008-3544: Multiple stack-based buffer overflows in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7↗2008-10-13
▶

💥Exploits & PoCs

1
Exploit-DB
HP OpenView Network Node Manager (OV NNM) 7.53 - Multiple Vulnerabilities↗2008-04-07
▶
CVE-2008-3544 (CRITICAL CVSS 9) | Multiple stack-based buffer overflo | cvebase.io