CVE-2007-2136
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote...
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
- Record
CVE-2007-2136- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
- Record
CVE-2007-2136- Updated
- 2026-11-02
EUVDEUVD-2007-2131 No score
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
- Record
EUVD-2007-2131- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-92ch-h5qf-x8rm No score
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote...
Stack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote attackers to execute arbitrary code by connecting to TCP port 10128 and sending certain XDR data, which is not properly parsed.
- Record
GHSA-92ch-h5qf-x8rm- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2136 is a high vulnerability (CVSS 7.5) in Bmc Patrol Perform Agent, published April 22, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.34%, the 91st percentile. No source names a fixed version.