CVE-1999-0921
MediumExploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Risk Assessment
An attacker can cause service unavailability, impacting the organization's operational continuity.
Recommendation
It is recommended to monitor network traffic and implement packet filtering on the UDP port to minimize the risk of attack.
Other vulnerabilities in BMC Patrol
See all- CVE-2017-13130High
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
- CVE-2016-9638High
In BMC Patrol before version 9.13.10.02, the binary 'listguests64' is configured with the setuid bit. When executed, it looks for a binary named 'virsh' using the PATH environment variable, allowing it to run 'virsh' with root privileges.
- CVE-2023-34257Critical
An issue was discovered in BMC Patrol through version 23.1.00 that allows remote modification of the agent's configuration without authentication. Some SNMP-related configuration fields can lead to code execution when the agent is restarted.
- CVE-2023-34258High
An issue was discovered in BMC Patrol before version 22.1.00 that allows the agent's configuration to be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key, which can lead to remote code execution.
- CVE-1999-0801High
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
Original NVD description (English source)
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS