CVE-2005-2773
CriticalSummary
Vulnerability in HP OpenView Network Node Manager versions 6.2 through 7.50 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the node, cdpView, freeIPaddrs, or ecscmg parameters in .ovpl scripts.
Risk Assessment
An attacker can take control of the network management server, compromising the confidentiality, integrity, and availability of the monitored IT infrastructure.
Recommendation
Immediately upgrade HP OpenView Network Node Manager to a version later than 7.50 or apply the appropriate security patch from the vendor.
Original NVD description (English source)
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNodes.ovpl, (2) cdpView.ovpl, (3) freeIPaddrs.ovpl, and (4) ecscmg.ovpl.