high7.2Public exploit code
CVE-2017-6554
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Quest Privilege Manager 6.0.0 - Arbitrary File Write2017-04-10 · remote · linux
Impact
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quest | Privilege Manager | Versions 6.0.0-27, 6.0.0-50 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html
- http://www.securityfocus.com/bid/97686
- https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
- https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
- https://www.exploit-db.com/exploits/41861/
- http://packetstormsecurity.com/files/142095/Quest-Privilege-Manager-6.0.0-Arbitrary-File-Write.html
- http://www.securityfocus.com/bid/97686
- https://0xdeadface.wordpress.com/2017/04/07/multiple-vulnerabilities-in-quest-privilege-manager-6-0-0-xx-cve-2017-6553-cve-2017-6554/
- https://support.oneidentity.com/privilege-manager-for-unix/kb/SOL133824
- https://www.exploit-db.com/exploits/41861/