CVE-2007-4349

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-23 · updated 2026-06-16

Description

The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.

Affected products

HP Openview Performance Agent: c.04.60, c.04.61
HP Openview Reporter: 3.70
HP Performance Agent: 4.70
HP Reporter: 3.8

References

http://marc.info/?l=bugtraq&m=122876677518654&w=2
http://marc.info/?l=bugtraq&m=122876827120961&w=2
http://secunia.com/advisories/27054
http://secunia.com/secunia_research/2007-83/
http://securityreason.com/securityalert/4501
http://www.securityfocus.com/archive/1/497648/100/0/threaded
http://www.securityfocus.com/bid/31860
http://www.securitytracker.com/id?1021092
http://www.vupen.com/english/advisories/2008/2888
https://exchange.xforce.ibmcloud.com/vulnerabilities/46028
http://marc.info/?l=bugtraq&m=122876677518654&w=2
http://marc.info/?l=bugtraq&m=122876827120961&w=2

Get alerted when CVE-2007-4349 or the next vulnerability affects your stack