CVE-2009-1420
Summary
| CVE | CVE-2009-1420 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-06-11 15:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Hp | Hpovnnm.hpovmib | 1.30.000 | All | All | All |
| Application | Hp | Hpovnnm.hpovsnmp | 1.30.000 | All | All | All |
| Application | Hp | Openview Network Node Manager | 7.51 | - | hp-ux | All |
| Application | Hp | Openview Network Node Manager | 7.51 | - | linux | All |
| Application | Hp | Openview Network Node Manager | 7.51 | - | solaris | All |
| Application | Hp | Openview Network Node Manager | 7.51 | - | windows | All |
| Application | Hp | Openview Network Node Manager | 7.53 | - | hp-ux | All |
| Application | Hp | Openview Network Node Manager | 7.53 | - | linux | All |
| Application | Hp | Openview Network Node Manager | 7.53 | - | solaris | All |
| Application | Hp | Openview Network Node Manager | 7.53 | - | windows | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Public Advisory: 06.26.09 // iDefense Labs | af854a3a-2127-422b-91ae-364da2661108 | labs.idefense.com | |
| SecurityTracker.com Archives - HP OpenView Network Node Manager SNMP/MIB Bug Lets Remote Users Execute Arbitrary Code | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | Patch |
| HP OpenView Network Node Manager "rping" Buffer Overflow Vulnerability - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| HP OpenView Network Node Manager 'rping' Stack Buffer Overflow Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Patch |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | |
| marc.info | af854a3a-2127-422b-91ae-364da2661108 | marc.info | Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.