CVE-2009-4181

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-10 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via vectors involving the sel and arg parameters to jovgraph.exe.

Affected products

HP Openview Network Node Manager: 7.0.1, 7.51, 7.53

References

http://dvlabs.tippingpoint.com/advisory/TPTI-09-14
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
http://marc.info/?l=bugtraq&m=126046355120442&w=2
http://www.securityfocus.com/archive/1/508357/100/0/threaded
http://www.securityfocus.com/bid/37261
http://www.securityfocus.com/bid/37343
https://exchange.xforce.ibmcloud.com/vulnerabilities/54655
http://dvlabs.tippingpoint.com/advisory/TPTI-09-14
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01950877
http://marc.info/?l=bugtraq&m=126046355120442&w=2
http://www.securityfocus.com/archive/1/508357/100/0/threaded
http://www.securityfocus.com/bid/37261

Get alerted when CVE-2009-4181 or the next vulnerability affects your stack