Vulnerabilities > CVE-2014-2591 - Privilege Escalation vulnerability in BMC Patrol Agent 3.9.00

047910
CVSS 6.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
bmc
NVD
Published: 2014-05-14
Updated: 2014-06-24

Summary

Untrusted search path vulnerability in BMC Patrol for AIX 3.9.00 allows local users to gain privileges via a crafted library, related to an incorrect RPATH setting. Per: http://cwe.mitre.org/data/definitions/426.html "CWE-426: Untrusted Search Path"

Vulnerable Configurations

Part Description Count
Application
Bmc
1

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/126154/bmcpatrol-escalate.txt
idPACKETSTORM:126154
last seen2016-12-05
published2014-04-14
reporterTim Brown
sourcehttps://packetstormsecurity.com/files/126154/BMC-Patrol-For-AIX-Insecure-RPATH-Use.html
titleBMC Patrol For AIX Insecure RPATH Use

References