« Volver al listado

CVE-2007-0446

Estado: ModificadaAlta (10)—

Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

HP — Mercury Loadrunner AgentHP — Mercury Monitor Over FirewallHP — Mercury Performance Center Agent

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-0446",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-02-08T23:28:00.000",
  "references": [
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/33132",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/24112",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017611",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017612",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1017613",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ciac.org/ciac/bulletins/r-123.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/303012",
      "tags": [
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/459505/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/22487",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0535",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-007.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32390",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00854250",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/33132",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/24112",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017611",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017612",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1017613",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ciac.org/ciac/bulletins/r-123.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.kb.cert.org/vuls/id/303012",
      "tags": [
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/459505/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/22487",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/0535",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.zerodayinitiative.com/advisories/ZDI-07-007.html",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32390",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1, and Monitor over Firewall 8.1 allows remote attackers to execute arbitrary code via a packet with a long server_ip_name field to TCP port 54345, which triggers the overflow in mchan.dll."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en magentproc.exe para Hewlett-Packard Mercury LoadRunner Agent 8.0 y 8.1, Performance Center Agent 8.0 y 8.1, y Monitor sobre el Firewall 8.1 permite a atacantes remotos ejecutar código de su elección a través de un paquete con un campo server_ip_name en el puerto TCP 54345, lo  cual dispara el desbordamiento en mchan.dll."
    }
  ],
  "lastModified": "2026-06-16T22:35:34.827",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:hp:mercury_loadrunner_agent:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "04C923B0-0B21-432C-8048-0FAA68BD01F0"
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_loadrunner_agent:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8510735-F24F-4C55-8B3D-26D5D05A91E8"
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_monitor_over_firewall:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85603116-77AC-4868-BD5E-929CD62B7616"
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_performance_center_agent:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "967C73D7-493A-40D3-8705-FF3880CC2DD4"
            },
            {
              "criteria": "cpe:2.3:a:hp:mercury_performance_center_agent:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "50A2B885-38D2-443F-877E-A49B9241B73B"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}