CVE-2008-1842

critical HPE
CVSS v3 Base Score
10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
30.4%
Exploitation probability in 30 days
Top 3% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: April 16, 2008 (6602 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.

CWE

CWE-189

Affected Products

hp openview network node manager

References

🔗 aluigi.altervista.org 🔗 aluigi.org 🔗 marc.info 🔗 secunia.com 🔗 securitytracker.com