CVE-2007-4349: Medium severity HP OpenView Performance Agent vulnerability

Published Oct 23, 2008

Updated

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

Affected Software

5 affected components

HP OpenView Performance Agent=c.04.60

HP OpenView Performance Agent=c.04.61

HP OpenView Reporter=3.70

HP Performance Agent=4.70

HP Reporter=3.8

Remediation

Patch Available

http://www.securityfocus.com/bid/31860

Event History

Oct 23, 2008

CVE Published

10:00 PM

Oct 24, 2008

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4349?

CVE-2007-4349 is classified as a denial of service vulnerability that affects multiple HP products.

How do I fix CVE-2007-4349?

To mitigate CVE-2007-4349, you should apply the latest patches or updates provided by HP for the affected software versions.

Which software versions are affected by CVE-2007-4349?

CVE-2007-4349 affects HP Performance Agent C.04.70, HP OpenView Performance Agent C.04.60, C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7.

Can CVE-2007-4349 be exploited remotely?

Yes, CVE-2007-4349 can be exploited remotely through a series of unspecified RPC requests.

What impact does CVE-2007-4349 have on systems?

CVE-2007-4349 can cause a denial of service, potentially rendering the affected services unavailable.