CVE-2005-2773
Last modified
CVE-2005-2773 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.. CISA has confirmed active exploitation in the wild. EPSS estimates a 74.09% chance of exploitation in the next 30 days.
Description
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Hp | Openview Network Node Manager | >= 6.2, <= 7.50 |
References
- http://marc.info/?l=bugtraq&m=112499121725662&w=2Exploit, Issue Tracking, Mailing List
- http://secunia.com/advisories/16555/Not Applicable
- http://www.securityfocus.com/advisories/9150Broken Link
- http://www.securityfocus.com/bid/14662Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999Third Party Advisory
- http://marc.info/?l=bugtraq&m=112499121725662&w=2Exploit, Issue Tracking, Mailing List
- http://secunia.com/advisories/16555/Not Applicable
- http://www.securityfocus.com/advisories/9150Broken Link
- http://www.securityfocus.com/bid/14662Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21999Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2005-2773US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2005-2773?
How severe is CVE-2005-2773?
How do I fix CVE-2005-2773?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-2767Buffer overflow in LeapFTP allows remote attackers to execut…
- CVE-2005-2768Heap-based buffer overflow in the Sophos Antivirus Library, …
- CVE-2005-2769Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 …
- CVE-2005-2770WRQ Reflection for Secure IT Windows Server 6.0 (formerly kn…
- CVE-2005-2771WRQ Reflection for Secure IT Windows Server 6.0 (formerly kn…
- CVE-2005-2772Multiple stack-based buffer overflows in University of Minne…
- CVE-2005-2774Format string vulnerability in Lithium II mod 1.24 for Quake…
- CVE-2005-2775php_api.php in phpWebNotes 2.0.0 uses the extract function t…
- CVE-2005-2776Multiple cross-site scripting (XSS) vulnerabilities in Looki…
- CVE-2005-2777Looking Glass 20040427 allows remote attackers to execute ar…
- CVE-2005-2778SQL injection vulnerability in member.php in MyBulletinBoard…
- CVE-2005-2779The iTAN Online-Banking Security System allows remote attack…
Are you affected by CVE-2005-2773?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
