CVE-2009-0920: HP Network Node Manager

High severity, CVSS 7.5. EPSS: 74.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in OvCgi/Toolbar.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long OvOSLocale cookie, a variant of CVE-2008-0067.

Affected products

• HP Network Node Manager: version 7.0.1 only; version 7.5.1 only; version 7.5.3 only

Published 2009-03-25. Last modified 2026-06-16.