CVE-1999-0801
HighExploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Risk Assessment
Attackers may take control of the agent, potentially leading to unauthorized access to systems and data.
Recommendation
It is recommended to implement proper authentication mechanisms and monitor network traffic for suspicious activities.
Other vulnerabilities in BMC Patrol
See all- CVE-2017-13130High
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
- CVE-2016-9638High
In BMC Patrol before version 9.13.10.02, the binary 'listguests64' is configured with the setuid bit. When executed, it looks for a binary named 'virsh' using the PATH environment variable, allowing it to run 'virsh' with root privileges.
- CVE-2023-34257Critical
An issue was discovered in BMC Patrol through version 23.1.00 that allows remote modification of the agent's configuration without authentication. Some SNMP-related configuration fields can lead to code execution when the agent is restarted.
- CVE-2023-34258High
An issue was discovered in BMC Patrol before version 22.1.00 that allows the agent's configuration to be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key, which can lead to remote code execution.
- CVE-1999-0921Medium
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Original NVD description (English source)
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.