vulnwire
4.3med

CVE-2007-4349

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Re…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.1%
percentile 88%
Public exploits
0
none known

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

Exploit prediction (EPSS)

3.08% probability of exploitation in the next 30 days, higher than 88% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

References

  • securityreason.com /securityalert/4501 · third-party-advisory, x_refsource_SREASON, x_transferred
  • marc.info /?l=bugtraq&m=122876677518654&w=2 · vendor-advisory, x_refsource_HP, x_transferred
  • securitytracker.com /id?1021092 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/46028 · vdb-entry, x_refsource_XF, x_transferred
  • secunia.com /advisories/27054 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /secunia_research/2007-83/ · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/497648/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/31860 · vdb-entry, x_refsource_BID, x_transferred
  • vupen.com /english/advisories/2008/2888 · vdb-entry, x_refsource_VUPEN, x_transferred
  • marc.info /?l=bugtraq&m=122876827120961&w=2 · vendor-advisory, x_refsource_HP, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.