PRIOn knowledge basePRION:CVE-2007-4349Out-of-bounds
6.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.068 Low
EPSS
Percentile
93.7%
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openview_performance_agent | eq | .4.60-c | |
| openview_performance_agent | eq | .4.61-c | |
| openview_reporter | eq | 3.70 | |
| performance_agent | eq | 4.70 | |
| reporter | eq | 3.8 |
References
secunia.com/advisories/27054
secunia.com/secunia_research/2007-83/
securityreason.com/securityalert/4501
www.securityfocus.com/archive/1/497648/100/0/threaded
www.securityfocus.com/bid/31860
www.securitytracker.com/id?1021092
www.vupen.com/english/advisories/2008/2888
exchange.xforce.ibmcloud.com/vulnerabilities/46028
marc.info/?l=bugtraq&m=122876677518654&w=2
marc.info/?l=bugtraq&m=122876827120961&w=2
Related
6.7 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
0.068 Low
EPSS
Percentile
93.7%