CVE-2009-1420

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 13.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-11 · updated 2026-06-16

Description

Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53, when used with SNMP (aka HPOvNNM.HPOVSNMP) before 1.30.009 and MIB (aka HPOvNNM.HPOVMIB) before 1.30.009, allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors.

Affected products

HP Openview Network Node Manager: 7.51, 7.53

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810
http://marc.info/?l=bugtraq&m=124457320614552&w=2
http://secunia.com/advisories/35408
http://securitytracker.com/id?1022360
http://www.securityfocus.com/bid/35267
http://www.vupen.com/english/advisories/2009/1549
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=810
http://marc.info/?l=bugtraq&m=124457320614552&w=2
http://secunia.com/advisories/35408
http://securitytracker.com/id?1022360
http://www.securityfocus.com/bid/35267
http://www.vupen.com/english/advisories/2009/1549

Get alerted when CVE-2009-1420 or the next vulnerability affects your stack