CVE-2007-2136

Summary

Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://securityreason.com/securityalert/2598
• http://www.vupen.com/english/advisories/2007/1457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33745
• http://www.securitytracker.com/id?1017934
• http://www.securityfocus.com/archive/1/466222/100/0/threaded
• http://www.securityfocus.com/bid/23557
• http://www.zerodayinitiative.com/advisories/ZDI-07-019.html
• http://secunia.com/advisories/24937

References

• http://securityreason.com/securityalert/2598
• http://www.vupen.com/english/advisories/2007/1457
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33745
• http://www.securitytracker.com/id?1017934
• http://www.securityfocus.com/archive/1/466222/100/0/threaded
• http://www.securityfocus.com/bid/23557
• http://www.zerodayinitiative.com/advisories/ZDI-07-019.html
• http://secunia.com/advisories/24937

• ←Previous
• Next→