A vulnerability was identified in HP OpenView Network Node Manager, which may be exploited by remote attackers to execute arbitrary commands. This flaw is due to an input validation error in the "connectedNodes.ovpl" script that does not properly filter a specially crafted "node" parameter, which may be exploited by a remote attacker to cause arbitrary shell commands to be executed.
Note : The "freeIPaddrs.ovpl", "cdpView.ovpl" and "ecscmg.ovpl" scripts are also affected.
