high7.8
CVE-2019-17044
An issue was discovered in BMC Patrol Agent 9.0.10i.
Impact
An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bmc | Patrol Agent | Version 9.0.10i |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.bmc.com/docs/PATROLAgent/11302/notification-of-action-required-by-patrol-agent-users-to-apply-the-security-patch-898411558.html
- https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
- https://twitter.com/whira_wr
- https://docs.bmc.com/docs/PATROLAgent/11302/notification-of-action-required-by-patrol-agent-users-to-apply-the-security-patch-898411558.html
- https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
- https://twitter.com/whira_wr