A vulnerability has been reported in BMC products, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in the BMC Patrol Agent service when processing certain BGS_MULTIPLE_READS commands. This can be exploited to cause a stack-based buffer overflow via a specially crafted request sent to e.g. TCP port 6768.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in the following products:
* BMC Performance Analysis for Servers versions 7.4.00 through 7.5.10
* BMC Performance Assurance for Servers, versions 7.4.00 through 7.5.10
* BMC Performance Assurance for Virtual Servers versions 7.4.00 through 7.5.10
* BMC Performance Analyzer for Servers versions 7.4.00 through 7.5.10
* BMC Performance Predictor for Servers versions 7.4.00 through 7.5.10
* BMC Capacity Management Essentials 1.2.00 (7.4.15)

Solution
Apply patch available via tracking number QM001683974. Please contact the vendor for further information.

Provided and/or discovered by
Manuel Santamarina-Suarez via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-11-039/

Deep Links
Links available to Secunia VIM customers