CVE-2009-3999

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 71.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-01-20 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in goform/formExportDataLogs in HP Power Manager before 4.2.10 allows remote attackers to execute arbitrary code via a long fileName parameter.

Affected products

HP Power Manager: through 4.2.9; 4.2.5, 4.2.6

References

http://marc.info/?l=bugtraq&m=126393370331959&w=2
http://secunia.com/advisories/37280
http://secunia.com/secunia_research/2009-47/
http://securityreason.com/securityalert/8482
http://securitytracker.com/id?1023470
http://www.securityfocus.com/bid/37867
http://marc.info/?l=bugtraq&m=126393370331959&w=2
http://secunia.com/advisories/37280
http://secunia.com/secunia_research/2009-47/
http://securityreason.com/securityalert/8482
http://securitytracker.com/id?1023470
http://www.securityfocus.com/bid/37867

Get alerted when CVE-2009-3999 or the next vulnerability affects your stack