{"schemaVersion":3,"id":"CVE-2008-0067","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) long string parameters to the OpenView5.exe CGI program; (2) a long string parameter to the OpenView5.exe CGI program, related to ov.dll; or a long string parameter to the (3) getcvdata.exe, (4) ovlaunch.exe, or (5) Toolbar.exe CGI program.","dates":{"published":"2009-01-08T19:00:00.000Z","modified":"2024-08-07T07:32:23.897Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.63419,"percentile":0.9921,"severity":"critical","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.63419},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.63419,"percentile":0.9921}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.63419,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.63419,"percentile":0.9921}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"16795","name":"HP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Buffer Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16795","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["cgi"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"cgi","file":"exploits/cgi/remote/16795.rb","codes":["CVE-2008-0067","OSVDB-53222"]},"metasploit":null},{"id":"MSF_EXPLOIT_WINDOWS_HTTP_HP_NNM_TOOLBAR_01","name":"HP OpenView Network Node Manager Toolbar.exe CGI Buffer Overflow","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/http/hp_nnm_toolbar_01.rb","maturity":"weaponized","reliabilityScore":0.8333333333333334,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/http/hp_nnm_toolbar_01","rank":"500","rankName":"great","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":2,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"hp","product":"openview_network_node_manager","name":"openview network node manager","label":"openview_network_node_manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"7.51","noFixRecorded":false,"fixedIn":null}],"versionsText":"7.51","eol":null,"hubHref":"/vendor/hp/openview_network_node_manager"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/secunia_research/2008-13/","label":"secunia.com/secunia_research/2008-13/","hostname":"secunia.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=123247393715913&w=2","label":"marc.info?l=bugtraq&m=123247393715913&w=2","hostname":"marc.info","tags":["Vendor Advisory","X Refsource HP"]},{"url":"http://securitytracker.com/id?1021521","label":"securitytracker.com/id?1021521","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://www.securityfocus.com/bid/33147","label":"www.securityfocus.com/bid/33147","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://securityreason.com/securityalert/4885","label":"securityreason.com/securityalert/4885","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://www.securityfocus.com/archive/1/499826/100/0/threaded","label":"www.securityfocus.com/archive/1/499826/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://securityreason.com/securityalert/8307","label":"securityreason.com/securityalert/8307","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://secunia.com/advisories/28074","label":"secunia.com/advisories/28074","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2009-01-08T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T07:32:23.897Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:32:50.694Z","stale":false,"partial":false}}