HP OpenView Network Node Manager Multiple Scripts hostname Parameter Remote Command Execution

critical Nessus Plugin ID 43155

Language:

Synopsis

The remote web server contains multiple CGI scripts that allow execution of arbitrary commands.

Description

The remote version of HP OpenView Network Node Manager fails to sanitize user-supplied input to the 'hostname' parameter used in the 'setMon.ovpl', 'setNotMon.ovpl', and 'ifMgrp.ovpl' scripts before using it to run a command. By leveraging these flaws, an unauthenticated, remote attacker may be able to execute arbitrary commands on the remote host within the context of the affected web server userid.

Note that the installed version of HP OpenView Network Node Manager is potentially affected by multiple other issues, though Nessus has not tested for these.

Solution

Apply the appropriate patch referenced in the vendor's advisory above.

Plugin Details

Severity: Critical

ID: 43155

File Name: hp_openview_nnm_multiple_cmd_exec.nasl

Version: 1.18

Type: remote

Family: CGI abuses

Published: 12/14/2009

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/a:hp:openview_network_node_manager

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/26/2009

Vulnerability Publication Date: 12/9/2009

Exploitable With

CANVAS (D2ExploitPack)

Reference Information

CVE: CVE-2009-3845

BID: 37300

Detections

Analytics