NVD

Id
48233  
Name
CVE-2009-0921  
Description
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-03-24  
Modified Date
2009-10-06  
Seq
2009-0921  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
242436 48233 CVE-2009-0921 HPSBMA02416  View
242437 48233 CVE-2009-0921 http://www.coresecurity.com/content/openview-buffer-overflows  View
242438 48233 CVE-2009-0921 20090323 CORE-2009-0122: HP OpenView Buffer Overflows  View
242439 48233 CVE-2009-0921 34134  View
242440 48233 CVE-2009-0921 34135  View
242441 48233 CVE-2009-0921 1021883  View
242442 48233 CVE-2009-0921 ADV-2009-0819  View
242443 48233 CVE-2009-0921 hp-ovnnm-ovacceptlang-acceptlanguage-bo(49363)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40458 JVNDB-2009-001464 HP OpenView Network Node Manager (OV NNM) の OvCgi/Toolbar.exe における複数のヒープオーバーフローの脆弱性 HP OpenView Network Node Manager (OV NNM) の OvCgi/Toolbar.exe には、複数のヒープオーバーフローの脆弱性が存在します。 CVE-2009-0921 38352 CVE-2009-0921 48233 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001464.html 2009-03-25 2009-06-30 View