CVE-2009-3846: HP OpenView Network Node Manager

High severity, CVSS 10.0. EPSS: 13.9% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in ovlogin.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via a long (1) userid or (2) passwd parameter.

Affected products

• HP OpenView Network Node Manager: version 7.0.1 only; version 7.51 only; version 7.53 only

Published 2009-12-10. Last modified 2026-06-16.