CVE-2007-2136

CVE-2007-2136 affects BMC Patrol PerformAgent: a stack-based buffer overflow in the bgs_sdservice.exe component, exploitable by sending crafted XDR data to TCP port 10128. The root cause is improper parsing of XDR data, allowing a remote attacker to corrupt the stack and potentially execute arbit...

CVE-2007-2136

Stack-based buffer overflow in bgssdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed...

CVE-2007-2136: Undefined Security Weakness

Stack-based buffer overflow in bgssdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed...

BMC Performance Manager PatrolAgent.EXE内存破坏漏洞

BMC Performance Manager是一款端到端系统管理解决方案。 BMC Performance Manager存在设计错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 PatrolAgent.exe监听TCP 3181端口，服务允许远程攻击者修改配置文件而不需要任何验证。攻击者修改在SNMP公共定义中的参数，如masterAgentName和masterAgentStartLine可导致任意代码执行。 BMC Software Performance Manager 目前没有解决方案提供： http://www.bmc.com/...

CVE-2007-1972: Undefined Security Weakness

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

BMC Patrol BGS_SDservice.EXE内存破坏漏洞

BMC Patrol是一款用于提供数据库系统监控的解决方案。 BMC Patrol PerformAgent服务存在内存破坏问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 bgssdservice.exe默认监听TCP 10128端口，由于不正确解析发送给此服务的XDR数据，攻击者可以操作进行内存拷贝操作的参数，而导致堆栈破坏，包括SEH指针，可造成任意指令执行。 BMC Software Patrol 3.5 BMC Software Patrol 3.4.11 BMC Software Patrol 3.3 BMC Software Patrol 3.2.7 BMC...

BMC Performance Manager unauthorized access

PatrolAgent.exe TCP/3181 allows SNMP community definition modification...

ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

ZDI-07-019: BMC Patrol PerformAgent bgssdservice Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-019.html April 18, 2007 -- CVE ID: CVE-2007-2136 -- Affected Vendor: BMC -- Affected Products: Patrol -- TippingPointTM IPS Customer Protection: TippingPoint IPS...

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-020.html April 18, 2007 -- CVE ID: CVE-2007-1972 -- Affected Vendor: BMC -- Affected Products: Performance Manager -- TippingPointTM IPS Customer Protection: TippingPoint IP...

BMC Patrol PerformAgent memory corruption

Buffer overflow on bgssdservice.exe TCP/10128 XDR data parsing...

BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of BMC Patrol. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper parsing of XDR data sent to the bgssdservice.exe process listening by default on TCP po...

BMC Performance Manager SNMP Command Execution Vulnerability

These vulnerabilities allows attackers to execute arbitrary code on vulnerable installations of BMC Performance Manager. User interaction is not required to exploit this vulnerability. The specific flaw exists in the PatrolAgent.exe listening on TCP port 3181. The service allows remote attackers ...

CVE-2007-0661

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...

Design/Logic Flaw

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...

CVE-2007-0661

Intel Enterprise Southbridge 2 Baseboard Management Controller BMC, Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S5000VSA, SC5400RA, and OEM Firmware for Intel Enterprise Southbridge Baseboard Management Controller before 20070119, when Intelligent Platform Management...

CVE-2007-0661

Summary of CVE-2007-0661 : Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC) and related Intel Server Boards (5000XAL, S5000PAL/S5000PSL/S5000XVN/S5000VCL/S5000VSA/SC5400RA) plus OEM firmware, prior to 20070119, are affected when IPMI is enabled. The vulnerability allows remote...

CVE-2007-0310

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names...

Design/Logic Flaw

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names...

CVE-2007-0310: Undefined Security Weakness

BMC Remedy Action Request System 5.01.02 Patch 1267 generates different error messages for failed login attempts with a valid username than for those with an invalid username, which allows remote attackers to determine valid account names...

CVE-2007-0310

The CVE-2007-0310 entry concerns BMC Remedy Action Request System 5.01.02 Patch 1267. The vulnerability arises because login error messages differ between valid‑username and invalid‑username attempts, allowing remote attackers to enumerate valid account names. Impact stated: attacker can determin...