Unscored CVE-2019-17044 EUVD-2019-7518GHSA-gpr9-77hp-32p9

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with…

Published Oct 14, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during execution.

References

https://twitter.com/whira_wr
https://github.com/blogresponder/BMC-Patrol-Agent-local-root-privilege-escalation
https://docs.bmc.com/docs/PATROLAgent/11302/notification-of-action-required-by-patrol-agent-users-to-apply-the-security-patch-898411558.html