Unscored severity · published Apr 22, 2007
CVE-2007-2136
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Patrol Perform Agent · Bmc
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2136
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2136
secunia.com
http://secunia.com/advisories/24937
securityreason.com
http://securityreason.com/securityalert/2598
www.securityfocus.com
http://www.securityfocus.com/archive/1/466222/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23557
www.securitytracker.com
http://www.securitytracker.com/id?1017934
www.vupen.com
http://www.vupen.com/english/advisories/2007/1457