CVE-2007-2136

Published: Apr 22, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.

Affected (1)

Products: Bmc: Patrol Perform Agent

Bmc

1 product

Patrol Perform Agent

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bmc Patrol Perform Agent	All versions

References (16)

http://secunia.com/advisories/24937

Source: cve@mitre.org

http://securityreason.com/securityalert/2598

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/466222/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/23557

Source: cve@mitre.org

http://www.securitytracker.com/id?1017934

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1457

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-07-019.html

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33745

Source: cve@mitre.org

http://secunia.com/advisories/24937