CVE-2007-6204: hp openview_network_node_manager

CVSS: 10.0v2.0HighModified

Published 13-12-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6204 is a high (CVSS 10.0) vulnerability in hp openview_network_node_manager. EPSS estimates a 69.61% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk

90/100

0100

Critical · default modelHow is this calculated?

CVSS score

10.0/10

010

High · v2.0 (NVD)

EPSS score

69.61%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits4reference, exploit-database, metasploit

Timeline

13-12-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

CVSS metrics

1 score · 1 source · 1 version

v2.010.0

EPSS trend

Probability

69.61%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 69.61% on 20-09-2026

20-09-202620-10-2026

EPSS score

69.61%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databaseremotewindowsVerified
HP OpenView Network Node Manager (OV NNM) - 'OpenView5.exe' CGI Buffer Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
HP OpenView Network Node Manager 07.50 - CGI Remote Buffer Overflow
Maturity: weaponized

Show all 4 exploits

MetasploitremoteVerified
HP OpenView Network Node Manager OpenView5.exe CGI Buffer Overflow
exploit/windows/http/hp_nnm_openview5
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Hp1 product

openview_network_node_manager6.41 | 7.0.1 | 7.51

1 vendor · 1 product

References

10 links

www.securityfocus.com/bid/26741VDB EntryX Refsource BIDExploitPatch
www.vupen.com/english/advisories/2007/4111VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27964Third Party AdvisoryX Refsource SECUNIAVendor Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923Vendor AdvisoryX Refsource HP
www.exploit-db.com/exploits/4724ExploitX Refsource EXPLOIT DB
securityreason.com/securityalert/3441Third Party AdvisoryX Refsource SREASON
www.securitytracker.com/id?1019055VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/38892VDB EntryX Refsource XF
www.zerodayinitiative.com/advisories/ZDI-07-071.htmlX Refsource MISC
www.securityfocus.com/archive/1/484704/100/0/threadedMailing ListX Refsource BUGTRAQ

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities