VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 28, 2009· Updated Jun 16, 2026

CVE-2008-2438

CVE-2008-2438

Description

Integer overflow in ovalarmsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a crafted command to TCP port 2954, which triggers a heap-based buffer overflow.

Affected products

4
  • Microfocus/OpenView Network Node Manager4 versions
    cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:hp:openview_network_node_manager:7.01:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.51:*:*:*:*:*:*:*
    • cpe:2.3:a:hp:openview_network_node_manager:7.53:*:*:*:*:*:*:*
    • (no CPE)range: 7.01, 7.51, and 7.53

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.