CVE-2007-3872

HP Openview Operations < a.07.50 - Buffer Overflow

Title source: rule

Description

Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16429

View Code ZIP pw:eip

metasploit WORKING POC NORMAL

rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_ovtrace.rb

View Code ZIP pw:eip

References (17)

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35928

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114023

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01115068

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01112038

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01111851

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109171

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25255

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109584

[Patch] http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=574

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2841

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110627

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01106515

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110576

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018548

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114156

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109617

[Third Party Advisory] http://secunia.com/advisories/26394

Scores

EPSS 0.6999

EPSS Percentile 98.7%

Details

Status published

Products (2)

hp/openview_operations < a.07.50

hp/shared_trace_service < a.07.50

Published Aug 09, 2007

Tracked Since Feb 18, 2026