CVE-2007-6204

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 69.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-13 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote attackers to execute arbitrary code via unspecified long arguments to (1) ovlogin.exe, (2) OpenView5.exe, (3) snmpviewer.exe, and (4) webappmon.exe, as demonstrated via a long Action parameter to OpenView5.exe.

Affected products

HP Openview Network Node Manager: 6.41, 7.0.1, 7.51

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923
http://secunia.com/advisories/27964
http://securityreason.com/securityalert/3441
http://www.securityfocus.com/archive/1/484704/100/0/threaded
http://www.securityfocus.com/bid/26741
http://www.securitytracker.com/id?1019055
http://www.vupen.com/english/advisories/2007/4111
http://www.zerodayinitiative.com/advisories/ZDI-07-071.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/38892
https://www.exploit-db.com/exploits/4724
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01188923
http://secunia.com/advisories/27964

Get alerted when CVE-2007-6204 or the next vulnerability affects your stack