Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-1842

high · 10

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.

10
CVSS
12.2%
EPSS (exploit prob.)
96th
EPSS percentile
2008-04-16
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-189

Affected products

VendorProductAffected versions
hpopenview_network_node_manager<= 7.53
hpopenview_network_node_manager4.11
hpopenview_network_node_manager5.0.1
hpopenview_network_node_manager5.01
hpopenview_network_node_manager6.0.1
hpopenview_network_node_manager6.1
hpopenview_network_node_manager6.2
hpopenview_network_node_manager6.4
hpopenview_network_node_manager6.10
hpopenview_network_node_manager6.20
hpopenview_network_node_manager6.31
hpopenview_network_node_manager6.41
hpopenview_network_node_manager7.0.1
hpopenview_network_node_manager7.01
hpopenview_network_node_manager7.50
hpopenview_network_node_manager7.51
hpopenview_network_node_manager8.01

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-1842