{"id":"CVE-2008-0068","aliases":["EUVD-2008-0081","GHSA-525w-26g2-gh87"],"status":"published","title":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7...","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05088,"percentile":0.92406,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-22"],"published":"2008-04-16T18:00:00Z","modified":"2026-06-16T22:48:52Z","exploits":[{"source":"exploitdb","id":"EDB-31638","title":"HP OpenView Network Node Manager (OV NNM) 7.x - 'OpenView5.exe?Action' Traversal Arbitrary File Access","type":"remote","platform":"windows","date":"2008-04-11","verified":true,"url":"https://www.exploit-db.com/exploits/31638"}],"products":[{"vendor":"hp","product":"openview_network_node_manager"}],"references":[{"url":"http://www.securitytracker.com/id?1019839","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41790","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/29796","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/490834/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/secunia_research/2008-4/advisory/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://securityreason.com/securityalert/3814","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28745","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://marc.info/?l=bugtraq\u0026m=121553649611253\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.osvdb.org/44359","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/490771","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/1214/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019838","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://aluigi.altervista.org/adv/closedviewx-adv.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0068"},{"url":"http://secunia.com/secunia_research/2008-4/advisory"},{"url":"https://github.com/advisories/GHSA-525w-26g2-gh87"}],"sources":{"cve":[{"id":"CVE-2008-0068","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","status":"published","published":"2008-04-16T18:00:00Z","modified":"2024-08-07T07:32:23.916Z","updated_at":"2026-11-02T14:34:49.246229Z"}],"euvd":[{"id":"EUVD-2008-0081","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","status":"published","published":"2008-04-16T18:00:00Z","modified":"2024-08-07T07:32:23Z","updated_at":"2026-11-03T01:39:07.783485Z"}],"ghsa":[{"id":"GHSA-525w-26g2-gh87","title":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7...","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","status":"published","published":"2022-05-01T23:27:25Z","modified":"2025-04-09T03:54:48Z","cwes":["CWE-22"],"updated_at":"2026-11-02T15:00:57.05109Z"}],"nvd":[{"id":"CVE-2008-0068","description":"Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to read arbitrary files via directory traversal sequences in the Action parameter.","status":"published","published":"2008-04-16T18:05:00Z","modified":"2026-06-16T22:48:52.317Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:01:26.27008Z"}]}}
