← back
CVE-2008-1842

CVE-2008-1842

EPSS 12.2%
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/31629unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://aluigi.altervista.org/adv/closedview-adv.txthttp://aluigi.org/poc/closedview.ziphttp://marc.info/?l=bugtraq&m=121321155405849&w=2http://secunia.com/advisories/29713http://securitytracker.com/id?1019821https://exchange.xforce.ibmcloud.com/vulnerabilities/41737http://www.securityfocus.com/archive/1/493781/100/0/threadedhttp://www.securityfocus.com/bid/28689http://www.vupen.com/english/advisories/2008/1159