CVE-2019-17043 - An issue was discovered in BMC Patrol Agent 9.0.10i

Back Back to CVE browser

HIGH

An issue was discovered in BMC Patrol Agent 9.0.10i

Published Oct 14, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.37%

Description

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
x_refsource_MISCThird Party Advisory
https://twitter.com/whira_wr
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation		x_refsource_MISCThird Party Advisory
https://twitter.com/whira_wr		x_refsource_MISCThird Party Advisory