CVE-2007-6204

50Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 70%

de la publicación al arma878 días

Publicada en NVD13 dic

1ª PoC+878d

metasploit6 dic

probabilidad de explotación

70%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

2 exploit(s) público(s)

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 2✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16805 cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4724

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923 http://secunia.com/advisories/27964 http://securityreason.com/securityalert/3441 https://exchange.xforce.ibmcloud.com/vulnerabilities/38892 https://www.exploit-db.com/exploits/4724 http://www.securityfocus.com/archive/1/484704/100/0/threaded http://www.securityfocus.com/bid/26741 http://www.securitytracker.com/id?1019055 http://www.vupen.com/english/advisories/2007/4111 http://www.zerodayinitiative.com/advisories/ZDI-07-071.html