CVEvulnerability
CVE-2007-2137
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-04-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port.
Affected configurations
• ibm tivoli monitoring express 6.1.0
References
- http://secunia.com/advisories/24938 secunia.com
- http://securityreason.com/securityalert/2597 securityreason.com
- http://www-1.ibm.com/support/docview.wss?uid=swg24012341 Patch
- http://www.securityfocus.com/archive/1/466216/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23558 Patch
- http://www.securitytracker.com/id?1017933 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1456 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-018.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33746 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/24938 secunia.com
- http://securityreason.com/securityalert/2597 securityreason.com
- http://www-1.ibm.com/support/docview.wss?uid=swg24012341 Patch
- http://www.securityfocus.com/archive/1/466216/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23558 Patch
- http://www.securitytracker.com/id?1017933 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/1456 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-018.html Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33746 exchange.xforce.ibmcloud.com