CVE-2017-6553

Critical

Published: 29/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Buffer overflow in Quest One Identity Privilege Manager for Unix before version 6.0.0.061 allows remote attackers to gain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.

Risk Assessment

Attackers can remotely take control of the policy server, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to upgrade Quest One Identity Privilege Manager to version 6.0.0.061 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.