National Cyber-Alert System

Vulnerability Summary for CVE-2007-0446

Overview

Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#303012

Name: VU#303012

Hyperlink:http://www.kb.cert.org/vuls/id/303012

External Source: HP

Name: SSRT061280

Type: Advisory; Patch Information

Hyperlink:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-07-007.html

Type: Advisory

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-07-007.html

External Source: OSVDB

Name: 33132

Hyperlink:http://osvdb.org/33132

External Source: XF

Name: mercury-multiple-agent-bo(32390)

Hyperlink:http://xforce.iss.net/xforce/xfdb/32390

External Source: BID

Name: 22487

Hyperlink:http://www.securityfocus.com/bid/22487

External Source: BUGTRAQ

Name: 20070208 ZDI-07-007: HP Mercury LoadRunner Agent Stack Overflow Vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/459505/100/0/threaded

External Source: VUPEN

Name: ADV-2007-0535

Hyperlink:http://www.frsirt.com/english/advisories/2007/0535

External Source: CIAC

Name: R-123

Hyperlink:http://www.ciac.org/ciac/bulletins/r-123.shtml

External Source: SECTRACK

Name: 1017613

Hyperlink:http://securitytracker.com/id?1017613

External Source: SECTRACK

Name: 1017612

Hyperlink:http://securitytracker.com/id?1017612

External Source: SECTRACK

Name: 1017611

Hyperlink:http://securitytracker.com/id?1017611

External Source: SECUNIA

Name: 24112

Hyperlink:http://secunia.com/advisories/24112