CVE-2007-0446

Published: Feb 8, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.

Affected (5)

Products: Hp: Mercury Loadrunner Agent, Mercury Monitor Over Firewall, Mercury Performance Center Agent

3 products

Mercury Loadrunner Agent

Mercury Monitor Over Firewall

Mercury Performance Center Agent

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Hp Mercury Loadrunner Agent	Version 8.0
Hp Mercury Loadrunner Agent	Version 8.1
Hp Mercury Monitor Over Firewall	Version 8.1
Hp Mercury Performance Center Agent	Version 8.0
Hp Mercury Performance Center Agent	Version 8.1

References (26)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250

Source: cve@mitre.org

http://osvdb.org/33132

Source: cve@mitre.org

http://secunia.com/advisories/24112

Source: cve@mitre.org

http://securitytracker.com/id?1017611

Source: cve@mitre.org

http://securitytracker.com/id?1017612

Source: cve@mitre.org

http://securitytracker.com/id?1017613

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/r-123.shtml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/303012

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/459505/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22487

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0535

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-07-007.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32390

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/33132

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/24112

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017611

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017612

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017613

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ciac.org/ciac/bulletins/r-123.shtml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/303012

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/459505/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22487

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/0535

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-07-007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32390

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.