A vulnerability has been reported in BMC PATROL, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error within the bgs_sdservice.exe process when processing XDR data. This can be exploited to corrupt memory by sending specially crafted XDR data to the process on port 10128/TCP.

Successful exploitation allows execution of arbitrary code.

Solution
Contact BMC customer support for patch information.

Provided and/or discovered by
Discovered by an anonymous person and reported via ZDI.

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-019.html

Deep Links
Links available to Secunia VIM customers