HP.OpenView.NNM.Perl.CGI.Command.Injection

Description

This indicates an attack attempt against a remote command execution vulnerability in Hewlett-Packard OpenView Network Node Manager.
A vulnerability has been reported in Hewlett-Packard OpenView Network Node Manager that may allow an attacker to execute shell commands on a vulnerable system. This is possible because the user input filters fail to properly sanitize the hostname parameter value that is passed to "setMon.ovpl". An attacker may include shell commands by supplying an injection string through the URL and a good string through POST request.

Affected Products

HP OpenView Network Node Manager 7.50 Windows 2000/XP
HP OpenView Network Node Manager 7.50 Solaris
HP OpenView Network Node Manager 7.50 Linux
HP OpenView Network Node Manager 7.50 HP-UX 11.X
HP OpenView Network Node Manager 7.50
HP OpenView Network Node Manager 7.53
HP OpenView Network Node Manager 7.51
HP OpenView Network Node Manager 7.50
HP OpenView Network Node Manager 7.01

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Refer to the vendor's web site for suggested workaround.

References