CVE-2011-0975

CRITICAL 10.0CVE-2011-0975 · Published 10/02/2011 · updated 16/06/2026

In short

CVE-2011-0975 is a CRITICAL (CVSS 10.0) vulnerability affecting capacity management essentials (bmc), performance analysis for servers (bmc), performance analyzer for servers (bmc).
Chance of exploitation in the next 30 days (EPSS): 6.8%, higher than 94.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
capacity management essentials bmc	`= 1.2.00`	No fix yet
performance analysis for servers bmc	`= 7.4.00= 7.4.10= 7.4.15= 7.5.00= 7.5.10`	No fix yet
performance analyzer for servers bmc	`= 7.4.00= 7.4.10= 7.4.15= 7.5.00= 7.5.10`	No fix yet
performance assurance for servers bmc	`= 7.4.00= 7.4.10= 7.4.15= 7.5.00= 7.5.10`	No fix yet
performance assurance for virtual servers bmc	`= 7.4.00= 7.4.10= 7.4.15= 7.5.00= 7.5.10`	No fix yet
performance predictor for servers bmc	`= 7.4.00= 7.4.10= 7.4.15= 7.5.00= 7.5.10`	No fix yet

Description

Stack-based buffer overflow in BMC PATROL Agent Service Daemon for in Performance Analysis for Servers, Performance Assurance for Servers, and Performance Assurance for Virtual Servers 7.4.00 through 7.5.10; Performance Analyzer and Performance Predictor for Servers 7.4.00 through 7.5.10; and Capacity Management Essentials 1.2.00 (7.4.15) allows remote attackers to execute arbitrary code via a crafted length value in a BGS_MULTIPLE_READS command to TCP port 6768.

References

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free