CVE-2017-13130
HighSummary
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.
Risk Assessment
This vulnerability allows local users to escalate privileges, potentially leading to unauthorized access to the system and data. Organizations should be aware of the risks associated with unauthorized access to system resources.
Recommendation
It is recommended to remove or restrict permissions on the libmcmclnx.so file and review the RPATH configuration to prevent exploitation of this vulnerability. Additionally, monitoring system access is advisable to detect unauthorized activities.
Other vulnerabilities in BMC Patrol
See all- CVE-2016-9638High
In BMC Patrol before version 9.13.10.02, the binary 'listguests64' is configured with the setuid bit. When executed, it looks for a binary named 'virsh' using the PATH environment variable, allowing it to run 'virsh' with root privileges.
- CVE-2023-34257Critical
An issue was discovered in BMC Patrol through version 23.1.00 that allows remote modification of the agent's configuration without authentication. Some SNMP-related configuration fields can lead to code execution when the agent is restarted.
- CVE-2023-34258High
An issue was discovered in BMC Patrol before version 22.1.00 that allows the agent's configuration to be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key, which can lead to remote code execution.
- CVE-1999-0801High
BMC Patrol allows remote attackers to gain access to an agent by spoofing frames.
- CVE-1999-0921Medium
BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service.
Original NVD description (English source)
mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is setuid root and the RPATH variable begins with the .: substring.