CVE-2005-2773

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-2773
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.

9.8 /10

CVSS v3.0 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://marc.info/?l=bugtraq&m=112499121725662&w=2 Exploit Issue Tracking Mailing List
http://marc.info/?l=bugtraq&m=112499121725662&w=2 Exploit Issue Tracking Mailing List
http://secunia.com/advisories/16555/ Not Applicable
http://secunia.com/advisories/16555/ Not Applicable
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/advisories/9150 Broken Link
http://www.securityfocus.com/bid/14662 Broken Link
http://www.securityfocus.com/bid/14662 Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*
History

15 Jan 2025, 23:34

Type Values Removed Values Added
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 - VDB Entry, Vendor Advisory () https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 - Third Party Advisory
References (SECUNIA) http://secunia.com/advisories/16555/ - Broken Link () http://secunia.com/advisories/16555/ - Not Applicable
References (BID) http://www.securityfocus.com/bid/14662 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/14662 - Broken Link
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=112499121725662&w=2 - Mailing List () http://marc.info/?l=bugtraq&m=112499121725662&w=2 - Exploit, Issue Tracking, Mailing List
References (HP) http://www.securityfocus.com/advisories/9150 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/advisories/9150 - Broken Link

16 Jul 2024, 17:50

Type Values Removed Values Added
References (HP) http://www.securityfocus.com/advisories/9150 - (HP) http://www.securityfocus.com/advisories/9150 - Broken Link, Third Party Advisory, VDB Entry
References (SECUNIA) http://secunia.com/advisories/16555/ - (SECUNIA) http://secunia.com/advisories/16555/ - Broken Link
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/21999 - VDB Entry, Vendor Advisory
References (BUGTRAQ) http://marc.info/?l=bugtraq&m=112499121725662&w=2 - (BUGTRAQ) http://marc.info/?l=bugtraq&m=112499121725662&w=2 - Mailing List
References (BID) http://www.securityfocus.com/bid/14662 - (BID) http://www.securityfocus.com/bid/14662 - Broken Link, Third Party Advisory, VDB Entry
CWE NVD-CWE-Other NVD-CWE-noinfo
CVSS v2 : 7.5
v3 : unknown 		v2 : 7.5
v3 : 9.8
CPE cpe:2.3:a:hp:openview_network_node_manager:6.4:*:nt_4.x_windows_2000:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.31:*:*:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.2:*:solaris:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.31:*:nt_4.x_windows_2000:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.41:*:*:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:7.50:*:solaris:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.10:*:*:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:7.50:*:*:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.2:*:nt_4.x_windows_2000:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.2:*:*:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.4:*:solaris:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:7.0.1:*:windows_2000_xp:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.41:*:solaris:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:7.50:*:windows_2000_xp:*:*:*:*:*
cpe:2.3:a:hp:openview_network_node_manager:6.4:*:*:*:*:*:*:*		 cpe:2.3:a:hp:openview_network_node_manager:*:*:*:*:*:*:*:*
Information

Published : 2005-09-02 23:03

Updated : 2025-03-14 19:07

NVD link : CVE-2005-2773

Mitre link : CVE-2005-2773

JSON object : View

Products Affected

hp

  • openview_network_node_manager
CWE
NVD-CWE-noinfo