Description
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.
References (10)
Core 10
Core References
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=122876677518654&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46028
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/27054
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2007-83/
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/31860
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/2888
Mailing List vendor-advisory
x_refsource_hp
http://marc.info/?l=bugtraq&m=122876827120961&w=2
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/4501
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1021092
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/497648/100/0/threaded
Scores
EPSS
0.0097
EPSS Percentile
76.9%
Details
Status
published
Products (5)
hp/openview_performance_agent
c.04.60
hp/openview_performance_agent
c.04.61
hp/openview_reporter
3.70
hp/performance_agent
4.70
hp/reporter
3.8
Published
Oct 23, 2008
Tracked Since
Feb 18, 2026