CVE-2008-1842

Опубликовано: 16 апр. 2008

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*

Версия до 7.53 (включая)

cpe:2.3:a:hp:openview_network_node_manager:4.11:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.10:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.20:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.31:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*

cpe:2.3:a:hp:openview_network_node_manager:8.01:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.34108

Средний

10 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

GHSA-jvf2-9v86-52wv

github

почти 4 года назад