{"api_version":"1","generated_at":"2026-07-23T07:11:30+00:00","cve":"CVE-2008-0068","urls":{"html":"https://cve.report/CVE-2008-0068","api":"https://cve.report/api/cve/CVE-2008-0068.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0068","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0068"},"summary":{"title":"CVE-2008-0068","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","state":"PUBLISHED","assigner":"flexera","published_at":"2008-04-16 18:05:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id?1019838","name":"http://www.securitytracker.com/id?1019838","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP OpenView Network Node Manager Input Validation Flaw in 'OpenView5.exe' Lets Remote Users Traverse the Directory - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/secunia_research/2008-4/advisory/","name":"http://secunia.com/secunia_research/2008-4/advisory/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP OpenView Network Node Manager OpenView5.exe Directory Traversal - Secunia Research - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/3814","name":"http://securityreason.com/securityalert/3814","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - HP OpenView Network Node Manager OpenView5.exeDirectory Traversal","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/490771","name":"http://www.securityfocus.com/archive/1/490771","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","name":"http://www.vupen.com/english/advisories/2008/1214/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/29796","name":"http://secunia.com/advisories/29796","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP OpenView Network Node Manager Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded","name":"http://www.securityfocus.com/archive/1/490834/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1019839","name":"http://www.securitytracker.com/id?1019839","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP OpenView Network Node Manager ovalarmsrv and ovtopmd Bugs Let Remote Users Deny Service - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/44359","name":"http://www.osvdb.org/44359","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","name":"http://marc.info/?l=bugtraq&m=121553649611253&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/28745","name":"http://www.securityfocus.com/bid/28745","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"HP OpenView Network Node Manager Directory Traversal and Multiple Denial Of Service Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","name":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0068","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0068","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"68","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"openview_network_node_manager","cpe6":"7.51","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2008","cve_id":"68","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"openview_network_node_manager","cpe6":"7.53","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:32:23.916Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1019839","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019839"},{"name":"hpopenview-openview5-directory-traversal(41790)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790"},{"name":"29796","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29796"},{"name":"20080414 Secunia Research: HP OpenView Network Node Manager OpenView5.exeDirectory Traversal","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://secunia.com/secunia_research/2008-4/advisory/"},{"name":"3814","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3814"},{"name":"28745","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/28745"},{"name":"SSRT080043","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"name":"44359","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/44359"},{"name":"20080411 Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/490771"},{"name":"ADV-2008-1214","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1214/references"},{"name":"1019838","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019838"},{"name":"HPSBMA02349","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-04-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","shortName":"flexera"},"references":[{"name":"1019839","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019839"},{"name":"hpopenview-openview5-directory-traversal(41790)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790"},{"name":"29796","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29796"},{"name":"20080414 Secunia Research: HP OpenView Network Node Manager OpenView5.exeDirectory Traversal","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded"},{"tags":["x_refsource_MISC"],"url":"http://secunia.com/secunia_research/2008-4/advisory/"},{"name":"3814","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3814"},{"name":"28745","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/28745"},{"name":"SSRT080043","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"name":"44359","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/44359"},{"name":"20080411 Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/490771"},{"name":"ADV-2008-1214","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1214/references"},{"name":"1019838","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019838"},{"name":"HPSBMA02349","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"tags":["x_refsource_MISC"],"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"PSIRT-CNA@flexerasoftware.com","ID":"CVE-2008-0068","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1019839","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019839"},{"name":"hpopenview-openview5-directory-traversal(41790)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790"},{"name":"29796","refsource":"SECUNIA","url":"http://secunia.com/advisories/29796"},{"name":"20080414 Secunia Research: HP OpenView Network Node Manager OpenView5.exeDirectory Traversal","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded"},{"name":"http://secunia.com/secunia_research/2008-4/advisory/","refsource":"MISC","url":"http://secunia.com/secunia_research/2008-4/advisory/"},{"name":"3814","refsource":"SREASON","url":"http://securityreason.com/securityalert/3814"},{"name":"28745","refsource":"BID","url":"http://www.securityfocus.com/bid/28745"},{"name":"SSRT080043","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"name":"44359","refsource":"OSVDB","url":"http://www.osvdb.org/44359"},{"name":"20080411 Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/490771"},{"name":"ADV-2008-1214","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1214/references"},{"name":"1019838","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019838"},{"name":"HPSBMA02349","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=121553649611253&w=2"},{"name":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","refsource":"MISC","url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt"}]}}}},"cveMetadata":{"assignerOrgId":"44d08088-2bea-4760-83a6-1e9be26b15ab","assignerShortName":"flexera","cveId":"CVE-2008-0068","datePublished":"2008-04-16T18:00:00.000Z","dateReserved":"2008-01-03T00:00:00.000Z","dateUpdated":"2024-08-07T07:32:23.916Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-04-16 18:05:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*","matchCriteriaId":"F5CC1E39-5607-41A9-8BBE-A51F1AC9D5CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*","matchCriteriaId":"A3A4986C-97B8-4382-AC4B-55E22C6BAE62"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"68","Ordinal":"1","Title":"CVE-2008-0068","CVE":"CVE-2008-0068","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"68","Ordinal":"1","NoteData":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","Type":"Description","Title":"CVE-2008-0068"},{"CveYear":"2008","CveId":"68","Ordinal":"2","NoteData":"2008-04-16","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"68","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}