critical9.8Public exploit code
CVE-2017-6553
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Quest Privilege Manager - pmmasterd Buffer Overflow (Metasploit)2017-05-15 · remote · linux · Verified
Impact
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quest | Privilege Manager For Unix | through 6.0.0-50 |
Weakness classification
References
- NVD record
- CVE.org record
- https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
- https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
- https://www.exploit-db.com/exploits/42010/
- https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
- https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
- https://www.exploit-db.com/exploits/42010/