CVE-2009-3849: HP OpenView Network Node Manager

High severity, CVSS 10.0. EPSS: 73.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allow remote attackers to execute arbitrary code via (1) a long Template parameter to nnmRptConfig.exe, related to the strcat function; or (2) a long Oid parameter to snmp.exe.

Affected products

• HP OpenView Network Node Manager: version 7.0.1 only; version 7.51 only; version 7.53 only

Published 2009-12-10. Last modified 2026-06-16.