Lucene search

K
cveMitreCVE-2007-2136
HistoryApr 22, 2007 - 7:19 p.m.

CVE-2007-2136

2007-04-2219:19:00
mitre
web.nvd.nist.gov
29
cve-2007-2136
bgs_sdservice.exe
buffer overflow
bmc patrol performagent
remote code execution
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.281

Percentile

96.9%

Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.

Affected configurations

Nvd
Node
bmcpatrol_perform_agent
VendorProductVersionCPE
bmcpatrol_perform_agent*cpe:2.3:a:bmc:patrol_perform_agent:*:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.281

Percentile

96.9%

Related for CVE-2007-2136