CVE-2009-1420
published 2009-06-11CVE-2009-1420: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and…
PriorityP354critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
13.45%
96.0th percentile
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | openview_network_node_manager | — | — |
| hp | openview_network_node_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gjgf-fgq7-f6p3: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7
ghsa_unreviewed·2022-05-02·CVSS 10.0
CVE-2009-2298 [CRITICAL] CWE-119 GHSA-gjgf-fgq7-f6p3: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a CGI request to webappmon.exe. NOTE: this may overlap CVE-2009-1420.
GHSA
GHSA-w2f9-wjrj-jm38: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7
ghsa_unreviewed·2022-05-02
CVE-2009-1420 [HIGH] GHSA-w2f9-wjrj-jm38: Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7
Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810http://marc.info/?l=bugtraq&m=124457320614552&w=2http://secunia.com/advisories/35408http://securitytracker.com/id?1022360http://www.securityfocus.com/bid/35267http://www.vupen.com/english/advisories/2009/1549http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810http://marc.info/?l=bugtraq&m=124457320614552&w=2http://secunia.com/advisories/35408http://securitytracker.com/id?1022360http://www.securityfocus.com/bid/35267http://www.vupen.com/english/advisories/2009/1549
2009-06-11
Published