NetSight
IP …
critical10.0

CVE-2011-0975

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assu…

Impact

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.

Affected products

VendorProductAffected versions
BmcPerformance Analysis For Servers
Versions 7.4.00, 7.4.10, 7.4.15, 7.5.00, 7.5.10
BmcPerformance Assurance For Servers
Versions 7.4.00, 7.4.10, 7.4.15, 7.5.00, 7.5.10
BmcPerformance Assurance For Virtual Servers
Versions 7.4.00, 7.4.10, 7.4.15, 7.5.00, 7.5.10
BmcPerformance Analyzer For Servers
Versions 7.4.00, 7.4.10, 7.4.15, 7.5.00, 7.5.10
BmcPerformance Predictor For Servers
Versions 7.4.00, 7.4.10, 7.4.15, 7.5.00, 7.5.10
BmcCapacity Management Essentials
Version 1.2.00

Weakness classification

CWE-119

References