CVE-2007-1972

Related Files

Zero Day Initiative Advisory 07-020

Posted Apr 19, 2007

Authored by Tipping Point | Site zerodayinitiative.com

Vulnerabilities allow attackers to execute arbitrary code on vulnerable installations of BMC Performance Manager. User interaction is not required to exploit this vulnerability. The specific flaw exists in the PatrolAgent.exe listening on TCP port 3181. The service allows remote attackers to modify configuration files without authentication. This can be exploited by an attacker by modifying parameters in SNMP communities definitions. By modifying the masterAgentName and masterAgentStartLine parameters, an attacker can execute arbitrary code.

tags | advisory, remote, arbitrary, tcp, vulnerability

advisories | CVE-2007-1972

SHA-256 | af821d60c5943917a00431dbce91939ec5641db70437f462bbc64ff57193d46c

Download | Favorite | View