CVE-2007-2136

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-22 · updated 2026-06-16

Description

Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.

Affected products

BMC Patrol Perform Agent: all versions

References

http://secunia.com/advisories/24937
http://securityreason.com/securityalert/2598
http://www.securityfocus.com/archive/1/466222/100/0/threaded
http://www.securityfocus.com/bid/23557
http://www.securitytracker.com/id?1017934
http://www.vupen.com/english/advisories/2007/1457
http://www.zerodayinitiative.com/advisories/ZDI-07-019.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/33745
http://secunia.com/advisories/24937
http://securityreason.com/securityalert/2598
http://www.securityfocus.com/archive/1/466222/100/0/threaded
http://www.securityfocus.com/bid/23557

Get alerted when CVE-2007-2136 or the next vulnerability affects your stack