FKIE_CVE-2007-0446

Vulnerability from fkie_nvd - Published: 2007-02-08 23:28 - Updated: 2026-06-16 22:35
Severity
Summary
Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.
References
cve@mitre.orghttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250
cve@mitre.orghttp://osvdb.org/33132
cve@mitre.orghttp://secunia.com/advisories/24112
cve@mitre.orghttp://securitytracker.com/id?1017611
cve@mitre.orghttp://securitytracker.com/id?1017612
cve@mitre.orghttp://securitytracker.com/id?1017613
cve@mitre.orghttp://www.ciac.org/ciac/bulletins/r-123.shtml
cve@mitre.orghttp://www.kb.cert.org/vuls/id/303012US Government Resource
cve@mitre.orghttp://www.securityfocus.com/archive/1/459505/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/22487
cve@mitre.orghttp://www.vupen.com/english/advisories/2007/0535
cve@mitre.orghttp://www.zerodayinitiative.com/advisories/ZDI-07-007.htmlVendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/32390
af854a3a-2127-422b-91ae-364da2661108http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/33132
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24112
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017611
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017612
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017613
af854a3a-2127-422b-91ae-364da2661108http://www.ciac.org/ciac/bulletins/r-123.shtml
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/303012US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/459505/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/22487
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/0535
af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-07-007.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/32390
Impacted products
Vendor Product Version
hp mercury_loadrunner_agent 8.0
hp mercury_loadrunner_agent 8.1
hp mercury_monitor_over_firewall 8.1
hp mercury_performance_center_agent 8.0
hp mercury_performance_center_agent 8.1
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:mercury_loadrunner_agent:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "04C923B0-0B21-432C-8048-0FAA68BD01F0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_loadrunner_agent:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8510735-F24F-4C55-8B3D-26D5D05A91E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_monitor_over_firewall:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "85603116-77AC-4868-BD5E-929CD62B7616",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_performance_center_agent:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "967C73D7-493A-40D3-8705-FF3880CC2DD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_performance_center_agent:8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "50A2B885-38D2-443F-877E-A49B9241B73B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en magentproc.exe para Hewlett-Packard Mercury LoadRunner Agent 8.0 y 8.1, Performance Center Agent 8.0 y 8.1, y Monitor sobre el Firewall 8.1 permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un paquete con un campo server_ip_name en el puerto TCP 54345, lo  cual dispara el desbordamiento en mchan.dll."
    }
  ],
  "id": "CVE-2007-0446",
  "lastModified": "2026-06-16T22:35:34.827",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2007-02-08T23:28:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/33132"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/24112"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017611"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017612"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1017613"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.ciac.org/ciac/bulletins/r-123.shtml"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/303012"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/459505/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/22487"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2007/0535"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-007.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32390"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/33132"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/24112"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017611"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017612"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1017613"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.ciac.org/ciac/bulletins/r-123.shtml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/303012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/459505/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/22487"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2007/0535"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-007.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32390"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.