OSVDB ID: 44359

Title: HP OpenView Network Node Manager (OV NNM) OpenView5.exe Action Parameter Traversal Arbitrary File Access

Info

Disclosure

Apr 11, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Confidentiality
Solution: Patch / RCS
Disclosure: Vendor Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, HP has released a patch to address this vulnerability.

Products

Unknown or Incomplete

References

Security Tracker: 1019838 1019839
CVE ID: 2008-0068 (see also: NVD)
Bugtraq ID: 28745
Secunia Advisory ID: 29796
Related OSVDB ID: 44360 44361
VUPEN Advisory: ADV-2008-1214
Other Advisory URL: http://aluigi.altervista.org/adv/closedviewx-adv.txt
http://secunia.com/secunia_research/2008-4/advisory/
http://securityreason.com/securityalert/3814
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2008-04/0159.html
http://archives.neohapsis.com/archives/bugtraq/2008-07/0055.html
http://marc.info/?l=bugtraq&m=121553649611253&w=2

Credit

Luigi Auriemma - aluigialtervista.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/44359