Signature Detail
Short Name |
APP:HPOV:OVTRACE |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Hewlett-Packard OpenView OVTrace Buffer Overflow |
Release Date |
2007/12/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Hewlett-Packard OpenView OVTrace Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Hewlett-Packard OpenView. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the super user.
Extended Description
HP OpenView applications are prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on input that is supplied to opcode handlers of affected services. These vulnerabilities affect the 'ovtrcsvc.exe' and the 'OVTrace.exe' service. Attackers can exploit these issues to execute arbitrary code with superuser privileges.
Affected Products
- HP Business Process Insight 1.0
- HP Business Process Insight 1.1
- HP Business Process Insight 2.0
- HP Business Process Insight 2.10
- HP OpenView Business Process Insight 1.0
- HP OpenView Business Process Insight 1.1
- HP OpenView Business Process Insight 2.0
- HP OpenView Business Process Insight 2.10
- HP OpenView Dashboard 2.01
- HP Openview Internet Services 6.00
- HP Openview Internet Services 6.10
- HP Openview Internet Services 6.11 (Japanese)
- HP Openview Internet Services 6.20
- HP OpenView Network Node Manager 6.41
- HP OpenView Network Node Manager 7.01
- HP OpenView Network Node Manager 7.50
- HP OpenView Network Node Manager 7.51
- HP OpenView Operations 8.0
- HP OpenView Operations 8.1
- HP Openview Operations Manager for Windows 7.5
- HP OpenView Performance Agent 4.5
- HP OpenView Performance Agent 4.6
- HP OpenView Performance Insight 5.0
- HP OpenView Performance Insight 5.1
- HP OpenView Performance Insight 5.1.1
- HP OpenView Performance Insight 5.1.2
- HP OpenView Performance Insight 5.2
- HP OpenView Performance manager 5.0
- HP OpenView Performance manager 6.0
- HP Openview Quality Manager 1.2 SP1
- HP Openview Quality Manager 1.3
- HP Openview Quality Manager 1.40
- HP Openview Reporter 3.7
- HP OpenView Service Desk Process Insight 1.0
- HP OpenView Service Desk Process Insight 1.1
- HP OpenView Service Desk Process Insight 2.0
- HP OpenView Service Desk Process Insight 2.10
- HP Service Desk Process Insight 1.0
- HP Service Desk Process Insight 1.10
- HP Service Desk Process Insight 2.0
- HP Service Desk Process Insight 2.10
References
- BugTraq: 25255
- CVE: CVE-2007-3872
- URL: http://www.securityfocus.com/advisories/12961