Buffer overflow in Bmc Capacity Management Essentials
CVE-2011-0975
Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.
Vulnerability class: Buffer Overflow
EPSS: 0.068 (93.3th percentile) — read the EPSS interpretation.
Affected products
- Bmc Capacity_management_essentials — versions 1.2.00
- Bmc Performance_analysis_for_servers — versions 7.4.00, 7.4.10, 7.4.15
- Bmc Performance_analyzer_for_servers — versions 7.4.00, 7.4.10, 7.4.15
- Bmc Performance_assurance_for_servers — versions 7.4.00, 7.4.10, 7.4.15
- Bmc Performance_assurance_for_virtual_servers — versions 7.4.00, 7.4.10, 7.4.15
- Bmc Performance_predictor_for_servers — versions 7.4.00, 7.4.10, 7.4.15
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)