Unrated severityNVD Advisory· Published Mar 25, 2009· Updated Jun 16, 2026
CVE-2009-0921
CVE-2009-0921
Description
Multiple heap-based buffer overflows in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long OvAcceptLang cookie, which triggers the error in ov.dll and ovwww.dll, or (2) a long Accept-Language HTTP header, which triggers the error in ovwww.dll or libovwww.so.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:hp:network_node_manager:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:network_node_manager:7.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:hp:network_node_manager:7.5.3:*:*:*:*:*:*:*
- (no CPE)range: 7.01, 7.51, and 7.53
Patches
Vulnerability mechanics
References
9- www.coresecurity.com/content/openview-buffer-overflowsnvdExploit
- www.vupen.com/english/advisories/2009/0819nvdVendor Advisory
- marc.infonvd
- secunia.com/advisories/34444nvd
- www.securityfocus.com/archive/1/502054/100/0/threadednvd
- www.securityfocus.com/bid/34134nvd
- www.securityfocus.com/bid/34135nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/49363nvd
News mentions
0No linked articles in our index yet.