CVE-2007-4349

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
http://secunia.com/secunia_research/2007-83/	Vendor Advisory
http://secunia.com/advisories/27054	Vendor Advisory
http://www.securityfocus.com/bid/31860	Patch
http://marc.info/?l=bugtraq&m=122876677518654&w=2
http://marc.info/?l=bugtraq&m=122876827120961&w=2
http://securityreason.com/securityalert/4501
http://www.securitytracker.com/id?1021092
http://www.vupen.com/english/advisories/2008/2888	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46028
http://www.securityfocus.com/archive/1/497648/100/0/threaded

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hp:performance_agent:4.70:::::::*
	cpe:2.3:a:hp:openview_performance_agent:c.04.60:::::::*
	cpe:2.3:a:hp:openview_performance_agent:c.04.61:::::::*
	cpe:2.3:a:hp:openview_reporter:3.70:::::::*
	cpe:2.3:a:hp:reporter:3.8:::::::*

Information

Published : 2008-10-23 15:00

Updated : 2018-10-30 09:25

NVD link : CVE-2007-4349

Mitre link : CVE-2007-4349

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

hp

performance_agent
reporter
openview_reporter
openview_performance_agent

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/secunia_research/2007-83/", "name": "http://secunia.com/secunia_research/2007-83/", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "http://secunia.com/advisories/27054", "name": "27054", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/31860", "name": "31860", "tags": ["Patch"], "refsource": "BID"}, {"url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2", "name": "HPSBMA02391", "tags": [], "refsource": "HP"}, {"url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2", "name": "HPSBMA02390", "tags": [], "refsource": "HP"}, {"url": "http://securityreason.com/securityalert/4501", "name": "4501", "tags": [], "refsource": "SREASON"}, {"url": "http://www.securitytracker.com/id?1021092", "name": "1021092", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.vupen.com/english/advisories/2008/2888", "name": "ADV-2008-2888", "tags": ["Vendor Advisory"], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028", "name": "ov-traceservice-rpc-dos(46028)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded", "name": "20081022 Secunia Research: HP OpenView Products Shared Trace Service Denial of Service", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2007-4349", "ASSIGNER": "PSIRT-CNA@flexerasoftware.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-10-23T22:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hp:performance_agent:4.70:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:openview_performance_agent:c.04.60:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:openview_performance_agent:c.04.61:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:openview_reporter:3.70:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hp:reporter:3.8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-30T16:25Z"}