CVE-2011-0975 Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through....
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bmc performance analysis for servers | = 7.4.00 | No fix listed |
| bmc performance analysis for servers | = 7.4.10 | No fix listed |
| bmc performance analysis for servers | = 7.4.15 | No fix listed |
| bmc performance analysis for servers | = 7.5.00 | No fix listed |
| bmc performance analysis for servers | = 7.5.10 | No fix listed |
| bmc performance assurance for servers | = 7.4.00 | No fix listed |
| bmc performance assurance for servers | = 7.4.10 | No fix listed |
| bmc performance assurance for servers | = 7.4.15 | No fix listed |
| bmc performance assurance for servers | = 7.5.00 | No fix listed |
| bmc performance assurance for servers | = 7.5.10 | No fix listed |
| bmc performance assurance for virtual servers | = 7.4.00 | No fix listed |
| bmc performance assurance for virtual servers | = 7.4.10 | No fix listed |
| bmc performance assurance for virtual servers | = 7.4.15 | No fix listed |
| bmc performance assurance for virtual servers | = 7.5.00 | No fix listed |
| bmc performance assurance for virtual servers | = 7.5.10 | No fix listed |
| bmc performance analyzer for servers | = 7.4.00 | No fix listed |
| bmc performance analyzer for servers | = 7.4.10 | No fix listed |
| bmc performance analyzer for servers | = 7.4.15 | No fix listed |
| bmc performance analyzer for servers | = 7.5.00 | No fix listed |
| bmc performance analyzer for servers | = 7.5.10 | No fix listed |
| bmc performance predictor for servers | = 7.4.00 | No fix listed |
| bmc performance predictor for servers | = 7.4.10 | No fix listed |
| bmc performance predictor for servers | = 7.4.15 | No fix listed |
| bmc performance predictor for servers | = 7.5.00 | No fix listed |
| bmc performance predictor for servers | = 7.5.10 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bmc capacity management essentials | = 1.2.00 | No fix listed |
References
- 70788 vdb-entry
- 43177 third-party-advisory vendor-advisory
- 8076 third-party-advisory
- 20110203 ZDI-11-039: BMC PATROL Agent Service Daemon BGS_MULTIPLE_READS Remote Code Execution Vulnerability mailing-list
- 46151 vdb-entry
- ADV-2011-0286 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- bmc-patrolagent-bo(65135) vdb-entry