TUCoPS :: HP/UX :: tb13732.htm

TUCoPS :: HP/UX :: tb13732.htm
HP OpenView Network Node Manager Multiple CGI Buffer Overflows
ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows
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