HP OpenView Network Node Manager Multiple Remote Command Execution Vulnerabilities

Bugtraq ID:	14662
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2005 12:00AM
Updated:	Dec 22 2006 12:02AM
Credit:	James Fisher of Portcullis Computer Security Ltd discovered the 'connectedNodes.ovpl' vulnerability. David Litchfield of NGS Software Ltd. also reported these issues to the vendor.
Vulnerable:	HP OpenView Network Node Manager 7.50 Windows 2000/XP HP OpenView Network Node Manager 7.50 Solaris HP OpenView Network Node Manager 7.50 HP-UX 11.X HP OpenView Network Node Manager 7.50 HP OpenView Network Node Manager 7.0 .1 Windows 2000/XP HP OpenView Network Node Manager 7.0 .1 Solaris HP OpenView Network Node Manager 7.0 .1 Linux HP OpenView Network Node Manager 7.0 .1 HP-UX 11.X HP OpenView Network Node Manager 7.0 .1 HP OpenView Network Node Manager 6.41 Solaris HP OpenView Network Node Manager 6.31 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.31 HP OpenView Network Node Manager 6.10 - HP HP-UX 11.0 - HP HP-UX 10.20 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 HP OpenView Network Node Manager 6.4 Solaris HP OpenView Network Node Manager 6.4 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.4 HP OpenView Network Node Manager 6.2 Solaris - Sun Solaris 2.5.1 - Sun Solaris 8_sparc - Sun Solaris 7.0 - Sun Solaris 2.6 HP OpenView Network Node Manager 6.2 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.2 NT 4.X/Windows 2000 HP OpenView Network Node Manager 6.2 HP OpenView Network Node Manager 6.41

Not Vulnerable: