CVE-2007-1972: High severity BMC Performance Manager vulnerability
DISPUTED PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters. NOTE: the vendor disputes this vulnerability, stating that it does not exist when the system is properly configured.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1972?
CVE-2007-1972 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2007-1972?
To fix CVE-2007-1972, implement authentication controls on requests to modify configuration files in BMC Performance Manager.
Which versions of BMC Performance Manager are affected by CVE-2007-1972?
CVE-2007-1972 affects all versions of BMC Performance Manager that do not enforce authentication.
What kind of attacks can be executed due to CVE-2007-1972?
CVE-2007-1972 allows remote attackers to execute arbitrary code or modify critical configuration settings.
Is there a workaround for CVE-2007-1972 if immediate patching is not possible?
If immediate patching is not possible for CVE-2007-1972, consider restricting network access to the affected TCP port 3181.