CVE-2007-1972
- State
- Published
- Severity
- Not scored
- Published
- Apr 22, 2007
- Updated
- Aug 7, 2024
- Reserved
- Apr 11, 2007
Description
PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the vendor disputes this vulnerability, stating that it does not exist when the system is properly configured
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20070418 ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerabilitymailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-07-020.html
- ADV-2007-1458vdb-entry
- 1017935vdb-entry
- 23559vdb-entry
- 2599third-party-advisory
- 20070419 Re: ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.