CVE-2009-3840
CVE-2009-3840 is a medium-severity vulnerability in Hp Openview Network Node Manager with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 9% (95th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Hp Openview Network Node Manager
- Published:
- Last modified:
Description
The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.
Frequently asked questions
- What is CVE-2009-3840?
- The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.
- How severe is CVE-2009-3840?
- CVE-2009-3840 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2009-3840 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 9% (95th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2009-3840?
- CVE-2009-3840 primarily affects Hp Openview Network Node Manager. In total, 8 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2009-3840?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2009-3840 published?
- CVE-2009-3840 was published on 2009-11-19 and last updated on 2026-06-16.
References
- http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980
- http://osvdb.org/60200
- http://seclists.org/fulldisclosure/2009/Nov/199
- http://www.coresecurity.com/content/openview_nnm_internaldb_dos
- http://www.securityfocus.com/bid/37046
Affected products (8)
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:hp-ux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:linux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:solaris:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.51:-:windows:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:hp-ux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:linux:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:solaris:*:*:*:*:*
- cpe:2.3:a:hp:openview_network_node_manager:7.53:-:windows:*:*:*:*:*
More vulnerabilities in Hp Openview Network Node Manager
- CVE-2011-3167 — Critical (CVSS 10.0): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…
- CVE-2011-3166 — Critical (CVSS 10.0): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…
- CVE-2011-3165 — Critical (CVSS 10.0): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute…
- CVE-2011-0271 — Critical (CVSS 10.0): The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified…
- CVE-2011-0270 — Critical (CVSS 10.0): Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows…
- CVE-2011-0269 — Critical (CVSS 10.0): Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers…