Bmc Patrol Agent
13 CVEs affecting Bmc Patrol Agent. Latest disclosed: 2023-09-05. Critical: 2, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34257 | Critical | 9.8 | 2023-05-31 | An issue was discovered in BMC Patrol through 23.1.00. The agent's configuration can be remotely modified (and, by default, authentication is not required). So… |
CVE-2019-8352 | Critical | 9.8 | 2019-05-20 | By default, BMC PATROL Agent through 11.3.01 uses a static encryption key for encrypting/decrypting user credentials sent over the network to managed PATROL Ag… |
CVE-2020-35593 | High | 7.8 | 2023-09-05 | BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host. |
CVE-2019-17044 | High | 7.8 | 2019-10-14 | An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges… |
CVE-2019-17043 | High | 7.8 | 2019-10-14 | An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her… |
CVE-2018-20735 | High | 7.8 | 2019-01-17 | An issue was discovered in BMC PATROL Agent through 11.3.01. It was found that the PatrolCli application can allow for lateral movement and escalation of privi… |
CVE-2014-2591 | | 2014-05-14 | Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH set… | |
CVE-2008-5982 | | 2009-01-27 | Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid vers… | |
CVE-1999-1460 | | 1999-07-13 | BMC PATROL SNMP Agent before 3.2.07 allows local users to create arbitrary world-writeable files as root by specifying the target file as the second argument t… | |
CVE-1999-0801 | | 1999-04-09 | BMC Patrol allows remote attackers to gain access to an agent by spoofing frames. | |
CVE-1999-0921 | | 1999-04-01 | BMC Patrol allows any remote attacker to flood its UDP port, causing a denial of service. | |
CVE-1999-0443 | | 1999-04-01 | Patrol management software allows a remote attacker to conduct a replay attack to steal the administrator password. | |
CVE-1999-1459 | | 1998-11-02 | BMC PATROL Agent before 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file. |