10

CVE-2009-3845

The port-3443 HTTP server in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostname parameter to unspecified Perl scripts.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hp ≫ Openview Network Node Manager Version 7.0.1 Edition hp_ux
Hp ≫ Openview Network Node Manager Version 7.0.1 Edition linux
Hp ≫ Openview Network Node Manager Version 7.0.1 Edition solaris
Hp ≫ Openview Network Node Manager Version 7.0.1 Edition windows
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition hp-ux
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition linux
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition solaris
Hp ≫ Openview Network Node Manager Version 7.51 Update - Edition windows
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition hp-ux
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition linux
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition solaris
Hp ≫ Openview Network Node Manager Version 7.53 Update - Edition windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 21.95% 0.973
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=126046355120442&w=2
http://www.securityfocus.com/archive/1/508345/100/0/threaded
http://www.securityfocus.com/bid/37261
http://www.securityfocus.com/bid/37300
http://zerodayinitiative.com/advisories/ZDI-09-094/
https://exchange.xforce.ibmcloud.com/vulnerabilities/54651