CVE-2007-2136

Related Files

Zero Day Initiative Advisory 07-019

Posted Apr 19, 2007

Authored by Tipping Point | Site zerodayinitiative.com

A vulnerability allows attackers to execute arbitrary code on vulnerable installations of BMC Patrol. User interaction is not required to exploit this vulnerability. The specific flaw exists due to improper parsing of XDR data sent to the bgs_sdservice.exe process listening by default on TCP port 10128. An attacker can influence a parameter to a memory copy operation and cause corruption of the stack and including SEH pointers. This can be leveraged to execute arbitrary code.

tags | advisory, arbitrary, tcp

advisories | CVE-2007-2136

SHA-256 | c68d1abda193e0c11f283735950b98df7c0f02cde1ca790898b0e4241dba539e

Download | Favorite | View