Two vulnerabilities have been reported in HP OpenView Network Node Manager (OV NNM), which can potentially be exploited by malicious people to bypass certain security restrictions and gain knowledge of sensitive information, or to compromise a vulnerable system.

1) An unspecified error can be exploited to execute arbitrary code. No further information is available.

2) An unspecified error can be exploited to gain read access to certain files. No further information is available.

The vulnerabilities are reported in versions 6.20, 6.4x, 7.01, 7.50 running on HP-UX B.11.00, B.11.11, and B.11.23, Solaris, Windows NT, Windows 2000, Windows XP, and Linux.

Solution
Apply patches (see vendor advisories for details).

Provided and/or discovered by
1) The vendor credits Tenable Network Security.
2) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00809525
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00809410

Deep Links
Links available to Secunia VIM customers