Unscored severity · published Oct 23, 2008
CVE-2007-4349
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7…
–
CVSS
3.1%
EPSS
No
On KEV
Description
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openview Performance Agent · HP
c.04.60; c.04.61 · source: NVD
OR
Openview Reporter · HP
3.70 · source: NVD
PA
Performance Agent · HP
4.70 · source: NVD
RE
Reporter · HP
3.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4349
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4349
marc.info
http://marc.info/?l=bugtraq&m=122876677518654&w=2
marc.info
http://marc.info/?l=bugtraq&m=122876827120961&w=2
Vendor Advisory
http://secunia.com/advisories/27054
Vendor Advisory
http://secunia.com/secunia_research/2007-83/
securityreason.com
http://securityreason.com/securityalert/4501
www.securityfocus.com
http://www.securityfocus.com/archive/1/497648/100/0/threaded
More from Openview Performance Agent
–
CVE-2011-2608
ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53;…
–
CVE-2008-4420
Multiple stack-based buffer overflows in DZIP32.DLL before 5.0.0.8 in DynaZip Max and DZIPS32.DLL before 6.0.0.5 in DynaZip Max Secure; as used in HP OpenView Performance Agent…