ID CVE-2007-3872
Summary Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
References
Vulnerable Configurations
  • cpe:2.3:a:hp:openview_operations:*:*:windows:*:*:*:*:*
    cpe:2.3:a:hp:openview_operations:*:*:windows:*:*:*:*:*
  • cpe:2.3:a:hp:shared_trace_service:-:*:*:*:*:*:*:*
    cpe:2.3:a:hp:shared_trace_service:-:*:*:*:*:*:*:*
  • cpe:2.3:a:hp:shared_trace_service:a.07.50:*:*:*:*:*:*:*
    cpe:2.3:a:hp:shared_trace_service:a.07.50:*:*:*:*:*:*:*
CVSS
Base: 6.8 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:P
refmap via4
bid 25255
hp
  • HPSBMA02235
  • HPSBMA02236
  • HPSBMA02237
  • HPSBMA02238
  • HPSBMA02239
  • HPSBMA02240
  • HPSBMA02241
  • HPSBMA02242
  • HPSBMA02244
  • HPSBMA02245
  • HPSBMA02246
  • SSRT061260
idefense 20070809 Hewlett-Packard OpenView Operations OVTrace Buffer Overflow Vulnerabilities
sectrack 1018548
secunia 26394
vupen ADV-2007-2841
xf hp-openview-ovtrace-bo(35928)
saint via4
bid 25255
description HP OpenView Operations OVTrace buffer overflow
id net_openview_ovtracesbo
osvdb 39527
title openview_ovtrace
type remote
Last major update 29-07-2017 - 01:32
Published 09-08-2007 - 20:17
Last modified 29-07-2017 - 01:32
Back to Top