CVE-2007-4349 - Vulnerability Details - OpenCVE

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Hp	Openview Performance Agent Openview Reporter Performance Agent Reporter

Configuration 1 [-]

OR	cpe:2.3:a:hp:openview_performance_agent:c.04.60:::::::*
	cpe:2.3:a:hp:openview_performance_agent:c.04.61:::::::*
	cpe:2.3:a:hp:openview_reporter:3.70:::::::*
	cpe:2.3:a:hp:performance_agent:4.70:::::::*
	cpe:2.3:a:hp:reporter:3.8:::::::*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=122876677518654&w=2
http://marc.info/?l=bugtraq&m=122876827120961&w=2
http://secunia.com/advisories/27054
http://secunia.com/secunia_research/2007-83/
http://securityreason.com/securityalert/4501
http://www.securityfocus.com/archive/1/497648/100/0/threaded
http://www.securityfocus.com/bid/31860
http://www.securitytracker.com/id?1021092
http://www.vupen.com/english/advisories/2008/2888
https://exchange.xforce.ibmcloud.com/vulnerabilities/46028

History

No history.

MITRE

Status: PUBLISHED

Assigner: flexera

Published: 2008-10-23T21:00:00

Updated: 2024-08-07T14:53:55.597Z

Reserved: 2007-08-14T00:00:00

Link: CVE-2007-4349

Vulnrichment

No data.

NVD

Status : Modified

Published: 2008-10-23T22:00:01.027

Modified: 2024-11-21T00:35:22.727

Link: CVE-2007-4349

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-10-22T00:00:00", "descriptions": [{"lang": "en", "value": "The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "shortName": "flexera"}, "references": [{"name": "4501", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/4501"}, {"name": "HPSBMA02391", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2"}, {"name": "1021092", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1021092"}, {"name": "ov-traceservice-rpc-dos(46028)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028"}, {"name": "27054", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/27054"}, {"tags": ["x_refsource_MISC"], "url": "http://secunia.com/secunia_research/2007-83/"}, {"name": "20081022 Secunia Research: HP OpenView Products Shared Trace Service Denial of Service", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded"}, {"name": "31860", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/31860"}, {"name": "ADV-2008-2888", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/2888"}, {"name": "HPSBMA02390", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"name": "SSRT071481", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "PSIRT-CNA@flexerasoftware.com", "ID": "CVE-2007-4349", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "4501", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/4501"}, {"name": "HPSBMA02391", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2"}, {"name": "1021092", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1021092"}, {"name": "ov-traceservice-rpc-dos(46028)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028"}, {"name": "27054", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/27054"}, {"name": "http://secunia.com/secunia_research/2007-83/", "refsource": "MISC", "url": "http://secunia.com/secunia_research/2007-83/"}, {"name": "20081022 Secunia Research: HP OpenView Products Shared Trace Service Denial of Service", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded"}, {"name": "31860", "refsource": "BID", "url": "http://www.securityfocus.com/bid/31860"}, {"name": "ADV-2008-2888", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/2888"}, {"name": "HPSBMA02390", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"name": "SSRT071481", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:53:55.597Z"}, "title": "CVE Program Container", "references": [{"name": "4501", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/4501"}, {"name": "HPSBMA02391", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2"}, {"name": "1021092", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1021092"}, {"name": "ov-traceservice-rpc-dos(46028)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028"}, {"name": "27054", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/27054"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://secunia.com/secunia_research/2007-83/"}, {"name": "20081022 Secunia Research: HP OpenView Products Shared Trace Service Denial of Service", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded"}, {"name": "31860", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/31860"}, {"name": "ADV-2008-2888", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/2888"}, {"name": "HPSBMA02390", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"name": "SSRT071481", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}]}]}, "cveMetadata": {"assignerOrgId": "44d08088-2bea-4760-83a6-1e9be26b15ab", "assignerShortName": "flexera", "cveId": "CVE-2007-4349", "datePublished": "2008-10-23T21:00:00", "dateReserved": "2007-08-14T00:00:00", "dateUpdated": "2024-08-07T14:53:55.597Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hp:openview_performance_agent:c.04.60:*:*:*:*:*:*:*", "matchCriteriaId": "9374AB08-64F6-4376-BF01-652E88A7E050", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_performance_agent:c.04.61:*:*:*:*:*:*:*", "matchCriteriaId": "15053C63-0407-422A-9E7B-591E336D6121", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:openview_reporter:3.70:*:*:*:*:*:*:*", "matchCriteriaId": "380F0F94-E4D6-4630-AC10-C4D8922760A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:performance_agent:4.70:*:*:*:*:*:*:*", "matchCriteriaId": "4B769539-D927-4086-9160-F162488F5337", "vulnerable": true}, {"criteria": "cpe:2.3:a:hp:reporter:3.8:*:*:*:*:*:*:*", "matchCriteriaId": "2BCEDB40-6EC3-4F4F-A2E5-5B223AA58DDF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference."}, {"lang": "es", "value": "El servicio Shared Trace (tambi\u00e9n se conoce como OVTrace) en HP Performance Agent versi\u00f3n C.04.70 (4.70), HP OpenView Performance Agent versiones C.04.60 y C.04.61, HP Reporter versi\u00f3n 3.8 y HP OpenView Reporter versi\u00f3n 3.7 (Informe 3.70), permite a los atacantes remotos causar una denegaci\u00f3n de servicio por medio de una serie no especificada de peticiones RPC (tambi\u00e9n se conoce como Mensajes de Eventos de Rastreo) que desencadena un acceso de memoria fuera de l\u00edmites, relacionado con una referencia de objeto err\u00f3nea."}], "id": "CVE-2007-4349", "lastModified": "2024-11-21T00:35:22.727", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-10-23T22:00:01.027", "references": [{"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27054"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-83/"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://securityreason.com/securityalert/4501"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/31860"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "http://www.securitytracker.com/id?1021092"}, {"source": "PSIRT-CNA@flexerasoftware.com", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/2888"}, {"source": "PSIRT-CNA@flexerasoftware.com", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=122876677518654&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=122876827120961&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/27054"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/secunia_research/2007-83/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/4501"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/497648/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.securityfocus.com/bid/31860"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1021092"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.vupen.com/english/advisories/2008/2888"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/46028"}], "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}