CVE-2007-2136

Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-07-019.html	Vendor Advisory
http://www.securityfocus.com/bid/23557
http://www.securitytracker.com/id?1017934
http://secunia.com/advisories/24937
http://securityreason.com/securityalert/2598
http://www.vupen.com/english/advisories/2007/1457
https://exchange.xforce.ibmcloud.com/vulnerabilities/33745
http://www.securityfocus.com/archive/1/466222/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:bmc:patrol_perform_agent:*:*:*:*:*:*:*:*

Information

Published : 2007-04-22 12:19

Updated : 2018-10-16 09:42

NVD link : CVE-2007-2136

Mitre link : CVE-2007-2136

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

bmc

patrol_perform_agent

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-07-019.html", "name": "http://www.zerodayinitiative.com/advisories/ZDI-07-019.html", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://www.securityfocus.com/bid/23557", "name": "23557", "tags": [], "refsource": "BID"}, {"url": "http://www.securitytracker.com/id?1017934", "name": "1017934", "tags": [], "refsource": "SECTRACK"}, {"url": "http://secunia.com/advisories/24937", "name": "24937", "tags": [], "refsource": "SECUNIA"}, {"url": "http://securityreason.com/securityalert/2598", "name": "2598", "tags": [], "refsource": "SREASON"}, {"url": "http://www.vupen.com/english/advisories/2007/1457", "name": "ADV-2007-1457", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33745", "name": "bmcpatrol-bgssdservice-code-execution(33745)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/466222/100/0/threaded", "name": "20070418 ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-2136", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2007-04-22T19:19Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:bmc:patrol_perform_agent:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-16T16:42Z"}