CVE-2008-4559

Related Files

iDEFENSE Security Advisory 2009-02-06.1

Posted Feb 6, 2009

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 02.06.09 - Remote exploitation of multiple command injection vulnerabilities in Hewlett-Packard Development Co. LP (HP)'s Network Node Manager, could allow an attacker to execute arbitrary code with the privileges of the affected service. Multiple command injection vulnerabilities are present in NNM CGI applications. The vulnerabilities are very similar and occur in the webappmon.exe and OpenView5.exe program. iDefense has confirmed the existence of these vulnerabilities in Network Node Manager version 7.53 for Linux. Previous versions, as well as versions for other Unix based operating systems, may also be affected.

tags | advisory, remote, arbitrary, cgi, vulnerability

systems | linux, unix

advisories | CVE-2008-4559

SHA-256 | 7205e1f402b8dbdefe11b8330ff0cc23eca2e06cc1fe98d35bfcdc3e4fd65979

Download | Favorite | View