CVE-2007-6204

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 70%

from disclosure to weapon878 days

Published on NVDDec 13

1st PoC+878d

metasploitDec 6

exploitation probability

70%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

Affected products

n/a · n/a

public PoCs found — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16805 cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4724

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 http://secunia.com/advisories/27964 http://securityreason.com/securityalert/3441 https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 https://www.exploit-db.com/exploits/4724 http://www.securityfocus.com/archive/1/484704/100/0/threaded http://www.securityfocus.com/bid/26741 http://www.securitytracker.com/id?1019055 http://www.vupen.com/english/advisories/2007/4111 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html