CVE-2009-0920

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

74.94%

Published

Mar 24, 2009

Modified

Apr 22, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBHP OpenView Network Node Manager (OV NNM) - 'Toolbar.exe' CGI Cookie Handling Buffer Overflow (Metasploit)TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.

Weaknesses (CWE)

CWE-119

Affected Products (3)

hp · network_node_managervulnerable

References (18)

http://marc.info/?l=bugtraq&m=123791084113871&w=2

http://secunia.com/advisories/34444

Vendor Advisory

http://securityreason.com/securityalert/8308

http://www.coresecurity.com/content/openview-buffer-overflows

Exploit

http://www.securityfocus.com/archive/1/502054/100/0/threaded

http://www.securityfocus.com/bid/34294

http://www.securitytracker.com/id?1021883

http://www.vupen.com/english/advisories/2009/0819

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49364

http://marc.info/?l=bugtraq&m=123791084113871&w=2

http://secunia.com/advisories/34444

Vendor Advisory

http://securityreason.com/securityalert/8308

http://www.coresecurity.com/content/openview-buffer-overflows

Exploit

http://www.securityfocus.com/archive/1/502054/100/0/threaded

http://www.securityfocus.com/bid/34294

http://www.securitytracker.com/id?1021883

http://www.vupen.com/english/advisories/2009/0819

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/49364

KEV Catalog EPSS Scores Vendors All CVEs