CVE-2017-6553 - Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon

Back Back to CVE browser

CRITICAL

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon

Published Apr 29, 2017

9.8

CRITICAL

CVSS 3.0

EPSS 42.29%

Description

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-119

Buffer Overflow

References (3)

https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
x_refsource_MISCThird Party Advisory
https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
x_refsource_MISCPatchVendor Advisory
https://www.exploit-db.com/exploits/42010/
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/		x_refsource_MISCThird Party Advisory
https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824		x_refsource_MISCPatchVendor Advisory
https://www.exploit-db.com/exploits/42010/		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 29, 2017

Updated Aug 5, 2024

Reserved Mar 8, 2017

Link CVE-2017-6553

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-6553

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-6553