CVE-2007-4349

2008-10-2322:00:01

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.068

Percentile

93.9%

JSON

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

Affected configurations

Nvd

Node

hpopenview_performance_agentMatchc.04.60

hpopenview_performance_agentMatchc.04.61

hpopenview_reporterMatch3.70

hpperformance_agentMatch4.70

hpreporterMatch3.8

VendorProductVersionCPE
hpopenview_performance_agentc.04.60cpe:2.3:a:hp:openview_performance_agent:c.04.60:*:*:*:*:*:*:*
hpopenview_performance_agentc.04.61cpe:2.3:a:hp:openview_performance_agent:c.04.61:*:*:*:*:*:*:*
hpopenview_reporter3.70cpe:2.3:a:hp:openview_reporter:3.70:*:*:*:*:*:*:*
hpperformance_agent4.70cpe:2.3:a:hp:performance_agent:4.70:*:*:*:*:*:*:*
hpreporter3.8cpe:2.3:a:hp:reporter:3.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	openview_performance_agent	c.04.60	cpe:2.3:a:hp:openview_performance_agent:c.04.60:::::::*
hp	openview_performance_agent	c.04.61	cpe:2.3:a:hp:openview_performance_agent:c.04.61:::::::*
hp	openview_reporter	3.70	cpe:2.3:a:hp:openview_reporter:3.70:::::::*
hp	performance_agent	4.70	cpe:2.3:a:hp:performance_agent:4.70:::::::*
hp	reporter	3.8	cpe:2.3:a:hp:reporter:3.8:::::::*