
CVE-2008-3536 – HP Security Bulletin 2008-00.44
https://notcve.org/view.php?id=CVE-2008-3536
03 Sep 2008 — Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3537. Vulnerabilidad no especificada en ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, y 7.53 permite a atacantes remotos provocar una denegación de servicio a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2008-3537. Potential vulnerabilities have b... • http://marc.info/?l=bugtraq&m=122037165310549&w=2 •

CVE-2008-3537 – HP Security Bulletin 2008-00.44
https://notcve.org/view.php?id=CVE-2008-3537
03 Sep 2008 — Unspecified vulnerability in ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to cause a denial of service via unknown vectors, a different vulnerability than CVE-2008-3536. vulnerabilidad no especificada en ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, y 7.53 permite a atacantes remotos provocar una denegación de servicio a través de vectores no especificados, una vulnerabilidad diferente a CVE-2008-3536. Potential vulnerabilities ha... • http://marc.info/?l=bugtraq&m=122037165310549&w=2 •

CVE-2008-1852
https://notcve.org/view.php?id=CVE-2008-1852
16 Apr 2008 — ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure. ovalarmsrv en HP OpenView Network Node Manager (OV NNM) 7.51, 7.53 y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio (caída) a través de ciertas peticiones que especif... • http://aluigi.altervista.org/adv/closedviewx-adv.txt • CWE-399: Resource Management Errors •

CVE-2008-1853
https://notcve.org/view.php?id=CVE-2008-1853
16 Apr 2008 — The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request). El servicio ovtopmd en HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, y posiblemente otras versiones permite a atacantes remotos provocar una denegación de servicio (salida) mediante el envío de un paquete 0x36 (solicitud de salida). • http://aluigi.altervista.org/adv/closedviewx-adv.txt • CWE-399: Resource Management Errors •

CVE-2008-1851
https://notcve.org/view.php?id=CVE-2008-1851
16 Apr 2008 — ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments. ovalarmsrv de HP OpenView Network Node Manager (OV NNM) 7.51, 7.53 y puede que también en otras versiones; permite a atacantes remotos provocar una denegación de servicio (cuelgue) mediante ciertas solicitudes que no proporcionan todos los argumentos necesarios. • http://aluigi.altervista.org/adv/closedviewx-adv.txt • CWE-399: Resource Management Errors •

CVE-2008-1842 – HP OpenView Network Node Manager 7.x - 'ovspmd' Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-1842
16 Apr 2008 — Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow. Error en la propiedad signedness de enteros en el archivo ovspmd.exe en HP OpenView Network Node Manager (OV NNM) versiones 8.01 y 7.53 y anteriores,... • https://www.exploit-db.com/exploits/31629 • CWE-189: Numeric Errors •

CVE-2008-0068 – HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access
https://notcve.org/view.php?id=CVE-2008-0068
14 Apr 2008 — Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter. Una vulnerabilidad de salto de directorio en el archivo OpenView5.exe en HP OpenView Network Node Manager (OV NNM) versiones 7.01, 7.51 y 7.53, permite a los atacantes remotos leer archivos arbitrarios por medio secuencias de salto de directorio en el parámetro Action. Secunia Research h... • https://www.exploit-db.com/exploits/31638 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVE-2008-1697 – HP OpenView NNM 7.53, 7.51 OVAS.EXE Pre-Authentication Stack Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-1697
08 Apr 2008 — Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information. Un desbordamiento de búfer en la región stack de la memoria en la biblioteca ovwparser.dll en HP OpenView Network Node Manager (OV NNM) versiones 7.53, 7.51 y a... • https://packetstorm.news/files/id/84563 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVE-2008-0212 – iDEFENSE Security Advisory 2008-02-04.1
https://notcve.org/view.php?id=CVE-2008-0212
06 Feb 2008 — ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access. ovtopmd en HP OpenView Network Node Manager (OV NNM) versiones 6.41, 7.01 y 7.51, permite a los atacantes remotos causar una denegación de servicio (bloqueo) por medio de una petición TCP diseñada que desencadena un acceso de memoria fuera de límites. Remote exploitation of a denial of service vulnerabil... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=652 • CWE-399: Resource Management Errors •

CVE-2007-6343
https://notcve.org/view.php?id=CVE-2007-6343
13 Dec 2007 — Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, y 7.51 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección mediante vectores no especificados. • http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01218087 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •