CVE-2008-4559
high · 10HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via shell metacharacters in argument fields to the (1) webappmon.exe or (2) OpenView5.exe CGI program. NOTE: this issue may be partially covered by CVE-2009-0205.
10
CVSS
24.4%
EPSS (exploit prob.)
98th
EPSS percentile
2009-02-08
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hp | openview_network_node_manager | 7.0.1 |
| hp | openview_network_node_manager | 7.0.1 |
| hp | openview_network_node_manager | 7.0.1 |
| hp | openview_network_node_manager | 7.0.1 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.51 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
| hp | openview_network_node_manager | 7.53 |
Check a specific version with /api/v1/cve/match.
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01661610
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=770
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-4559