HP Network Node Manager allows unauthorized access

HP has reported a vulnerability in its OpenView Network Node Manager. Remote attackers can access parts of the system without prior authorization.

However in its security alert HP does not provide any details about this security hole or its exact effects. The company only lists the versions under threat: OpenView Network Node Manager 6.20, 6.4x, 7.01, 7.50 and 7.51 running on operating systems HP-UX B.11.00, B.11.11 and B.11.23, Solaris, Windows NT to XP, and Linux. HP is offering registered users updates for download from the home page.

See also:

• HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Access, HP security alert (login required)
• Patches for the versions affected (login required)

(mba)