----------------------------------------------------------------------

Do you need accurate and reliable IDS / IPS / AV detection rules?

Get in-depth vulnerability details:
http://secunia.com/binary_analysis/sample_analysis/

----------------------------------------------------------------------

TITLE:
HP OpenView Products Shared Trace Service Denial of Service

SECUNIA ADVISORY ID:
SA27054

VERIFY ADVISORY:
http://secunia.com/advisories/27054/

CRITICAL:
Less critical

IMPACT:
DoS

WHERE:
>From local network

SOFTWARE:
HP OpenView Reporter 3.x
http://secunia.com/advisories/product/15198/
HP OpenView Performance Agent 4.x
http://secunia.com/advisories/product/2100/

DESCRIPTION:
Secunia Research has discovered a vulnerability in various HP
products, which can be exploited by malicious people to cause a DoS
(Denial of Service).

A specific sequence of RPC requests made to the OpenView Shared Trace
Service causes incorrect usage of an object pointer. This results in
an access violation or division by zero error terminating the
process.

The vulnerability has been confirmed in HP OpenView Reporter 3.70 and
HP Performance Agent 4.70. Other versions may also be affected.

SOLUTION:
Restrict untrusted access to TCP ports 5051 and 5053.

PROVIDED AND/OR DISCOVERED BY:
Dyon Balding, Secunia Research.

ORIGINAL ADVISORY:
Secunia Research:
http://secunia.com/secunia_research/2007-83/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------