Secunia Research has discovered a vulnerability in various HP products, which can be exploited by malicious people to cause a DoS (Denial of Service).

A specific sequence of RPC requests made to the OpenView Shared Trace Service causes incorrect usage of an object pointer. This results in an access violation or division by zero error terminating the process.

The vulnerability has been confirmed in HP OpenView Reporter 3.70 and HP Performance Agent 4.70. Other versions may also be affected. The vulnerability is also reported in HP OpenView Network Node Manager (OV NNM) version 7.01, 7.51, and 7.53 running on HP-UX, Linux, Solaris, and Windows.

Solution
Apply vendor patches. Please see vendor advisories for more information.

Provided and/or discovered by
Dyon Balding, Secunia Research.

Changelog
Further details available in Customer Area

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2007-83/

HPSBMA02390 SSRT071481:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01621724

HPSBMA02391 SSRT071481:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01612418

HPSBMA02392 SSRT071481:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01607558

Deep Links
Links available in Customer Area