Description
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
References
- 2598 third-party-advisory
- ADV-2007-1457 vdb-entry
- bmcpatrol-bgssdservice-code-execution(33745) vdb-entry
- 1017934 vdb-entry
- 20070418 ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability mailing-list
- 23557 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-019.html
- 24937 third-party-advisory