Unrated severityNVD Advisory· Published Apr 16, 2008· Updated Jun 16, 2026
CVE-2008-1842
CVE-2008-1842
Description
Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*+ 17 more
- cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*range: <=7.53
- cpe:2.3:a:hp:openview_network_node_manager:4.11:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:5.01:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.10:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.20:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.31:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:8.01:*:*:*:*:*:*:*
- (no CPE)range: <=8.01, <=7.53
- Range: <=8.01, <=7.53
Patches
Vulnerability mechanics
References
9- aluigi.org/poc/closedview.zipnvdExploit
- secunia.com/advisories/29713nvdVendor Advisory
- www.vupen.com/english/advisories/2008/1159nvdVendor Advisory
- aluigi.altervista.org/adv/closedview-adv.txtnvd
- marc.infonvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/493781/100/0/threadednvd
- www.securityfocus.com/bid/28689nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41737nvd
News mentions
0No linked articles in our index yet.