CVE:CVE-2007-4349
CNNVD:CNNVD-200810-401
HP OpenView是惠普公司开发的系列网络管理软件。
HP OpenView产品的Trace服务在TCP 5051或5053端口上所暴露的RPC服务没有要求认证，如果向该端口发送了特定序列的RPC请求的话，就可能错误的引用对象，导致引用所分配缓冲区范围之外的内存。成功利用这个漏洞只能导致拒绝服务的情况。
solution:Upgrade hp openview_performance_agent to a higher version than c.04.60,c.04.61,and avoid the version c.04.60,c.04.61; Upgrade hp openview_reporter to a higher version than 3.70,and avoid the version 3.70; Upgrade hp performance_agent to a higher version than 4.70,and avoid the version 4.70; Upgrade hp reporter to a higher version than 3.8,and avoid the version 3.8