HP OpenView Network Node Manager (OV NNM) Execution of Arbitrary Code
19 May 2009
Summary
A potential vulnerability has been identified with HP OpenView Network Node Manager (OV NNM). The vulnerability could be exploited remotely to execute arbitrary code.
Vulnerable Systems:
* HP OpenView Network Node Manager (OV NNM) version 7.01, 7.51, 7.53 running on HP-UX, Linux, Solaris, and Windows
Patch Availability:
Patches are available to resolve the vulnerability for NNM version 7.53. HP has made archive files available to resolve the vulnerability for NNM v7.01.
OV NNM v7.53
Operating System, Required Patch
HP-UX (IA), PHSS_39246 or subsequent
HP-UX (PA), PHSS_39245 or subsequent
Linux RedHatAS2.1, LXOV_00093 or subsequent
Linux RedHat4AS-x86_64, LXOV_00094 or subsequent
Solaris, PSOV_03519 or subsequent
Windows, NNM_01197 or subsequent
To install the archive files for NNM v7.01:
1. Install the required patch listed below
2. Uncompress the archive (SSRT080125.701_IP12.hotfix.tar.gz)
3. Unpack the archive (SSRT080125.701_IP12.hotfix.tar)
4. ovstop -c
5. Follow the instructions in the README.txt file
6. ovstart -c
