{"id":"CVE-2007-3872","aliases":["EUVD-2007-3856","GHSA-7hp2-wg9m-cm55"],"status":"published","title":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP...","description":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.30276,"percentile":0.98236,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2007-08-09T20:00:00Z","modified":"2026-06-16T22:42:56Z","exploits":[{"source":"exploitdb","id":"EDB-16429","title":"HP OpenView - Operations OVTrace Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-06-22","verified":true,"url":"https://www.exploit-db.com/exploits/16429"},{"source":"metasploit","id":"exploit/windows/misc/hp_ovtrace","title":"HP OpenView Operations OVTrace Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-08-09","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/misc/hp_ovtrace"}],"products":[{"vendor":"hp","product":"openview_operations"},{"vendor":"hp","product":"shared_trace_service"}],"references":[{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109171","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35928","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/bid/25255","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114023","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109584","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01115068","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01112038","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01111851","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=574","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred","Patch"]},{"url":"http://www.vupen.com/english/advisories/2007/2841","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110627","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01106515","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110576","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018548","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114156","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109617","tags":["vendor-advisory","x_refsource_HP","x_transferred"]},{"url":"http://secunia.com/advisories/26394","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3872"},{"url":"https://github.com/advisories/GHSA-7hp2-wg9m-cm55"}],"sources":{"cve":[{"id":"CVE-2007-3872","description":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.","status":"published","published":"2007-08-09T20:00:00Z","modified":"2024-08-07T14:37:04.136Z","updated_at":"2026-11-02T13:32:45.563938Z"}],"euvd":[{"id":"EUVD-2007-3856","description":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.","status":"published","published":"2007-08-09T20:00:00Z","modified":"2024-08-07T14:37:04Z","updated_at":"2026-11-03T01:16:24.023061Z"}],"ghsa":[{"id":"GHSA-7hp2-wg9m-cm55","title":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP...","description":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.","status":"published","published":"2022-05-01T18:18:09Z","modified":"2023-01-31T05:04:06Z","updated_at":"2026-11-02T14:48:36.723893Z"}],"nvd":[{"id":"CVE-2007-3872","description":"Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.","status":"published","published":"2007-08-09T20:17:00Z","modified":"2026-06-16T22:42:56.927Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}