CVE-2007-3872

HP Openview Operations < a.07.50 - Buffer Overflow

Title source: rule

Description

Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.

Exploits (2)

metasploit WORKING POC NORMAL

rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/hp_ovtrace.rb

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16429

View Code ZIP pw:eip

References (17)

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01106515

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109171

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109584

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109617

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110576

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110627

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01111851

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01112038

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114023

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114156

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01115068

[Patch] http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=574

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35928

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25255

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1018548

[Third Party Advisory] http://secunia.com/advisories/26394

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2841

Scores

EPSS 0.7110

EPSS Percentile 98.7%

Classification

Status draft

Affected Products (2)

hp/openview_operations < a.07.50

hp/shared_trace_service < a.07.50

Timeline

Published Aug 09, 2007

Tracked Since Feb 18, 2026