CVE-2009-1420

Related Files

iDEFENSE Security Advisory 2009-06-26.1

Posted Jun 26, 2009

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 06.26.09 - Remote exploitation of a stack based buffer overflow vulnerability in Hewlett-Packard Development Co. LP (HP)'s Network Node Manager could allow an attacker to execute arbitrary code with the privileges of the affected service. The vulnerability exists within the 'rping' application, which is distributed with the Linux version of NNM. It is possible for a remote attacker to launch the 'rping' application and trigger a stack based buffer overflow. iDefense has confirmed the existence of this vulnerability in Network Node Manager version 7.53 for Linux. Previous versions may also be affected. The Windows version is not affected.

tags | advisory, remote, overflow, arbitrary

systems | linux, windows

advisories | CVE-2009-1420

SHA-256 | 7675a1f6766cff4edda973a4f9158e1010e7d7b646122849c2e2c355ac3642bf

Download | Favorite | View

HP Security Bulletin HPSBMA02430 SSRT080094

Posted Jun 9, 2009

Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - A potential vulnerability has been identified with HP OpenView Network Node Manager (OV NNM) running SNMP and MIB. The vulnerability could be exploited remotely to execute arbitrary code or to create a Denial of Service (DoS).

tags | advisory, denial of service, arbitrary

advisories | CVE-2009-1420

SHA-256 | adbe17937a74e321a838c48aab551631bfb8a84d025587aae81221952cb427a1

Download | Favorite | View