CVE-2009-3840

EPSS 9.3%

The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/10176unverified exploitdbwww.exploit-db.com/exploits/10377unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980 http://osvdb.org/60200 http://seclists.org/fulldisclosure/2009/Nov/199 http://www.coresecurity.com/content/openview_nnm_internaldb_dos http://www.securityfocus.com/bid/37046