CVE-2007-2136 Memory corruption in n/a
Remote attackers can execute arbitrary code by sending malicious data to the BMC Patrol PerformAgent service via TCP port 10128.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-2136?
CVE-2007-2136 is a high-severity memory corruption vulnerability in n/a, published on 22 Apr 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
Which versions are affected by CVE-2007-2136?
It affects 1 product.
Products include Bmc Patrol Perform Agent.
How do I fix CVE-2007-2136?
No fix has been published for CVE-2007-2136 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2007-2136 being exploited?
There is no known exploitation of CVE-2007-2136 in the wild and no public exploit code.
Sources
Also known as GHSA-92ch-h5qf-x8rm.