CVE-2007-1972: Undefined Security Weakness

PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the...

BMC Performance Manager unauthorized access

PatrolAgent.exe TCP/3181 allows SNMP community definition modification...

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability

ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-020.html April 18, 2007 -- CVE ID: CVE-2007-1972 -- Affected Vendor: BMC -- Affected Products: Performance Manager -- TippingPointTM IPS Customer Protection: TippingPoint IP...

BMC Performance Manager SNMP Command Execution Vulnerability

These vulnerabilities allows attackers to execute arbitrary code on vulnerable installations of BMC Performance Manager. User interaction is not required to exploit this vulnerability. The specific flaw exists in the PatrolAgent.exe listening on TCP port 3181. The service allows remote attackers ...