Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm) and other versions including 2.x 3.x and 4.x allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.