|
|
| |
| Secunia Research has discovered a vulnerability in various HP products, which can be exploited by malicious people to cause a DoS (Denial of Service). |
| |
Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2007-83/
|
| |
Vulnerable Systems:
* HP OpenView Report version 3.70
* HP Performance Agent version 4.70
The HP OpenView Trace Service exposes an RPC service on TCP port 5051 or 5053 that does not require authentication. By sending a particular sequence of RPC requests, an object is incorrectly referenced, which may cause a memory reference beyond an allocated buffer.
CVE Information:
CVE-2007-4349
Time Table:
15/10/2007 - Vendor contacted.
16/10/2007 - Vendor response.
10/06/2008 - Status update requested.
12/08/2008 - Status update requested.
12/08/2008 - Vendor responds with expected release date before end of September.
22/10/2008 - Public disclosure.
|
|
|
