Lucene search
PRIOn knowledge basePRION:CVE-2016-9638HistoryDec 02, 2016 - 5:59 p.m.
Design/Logic Flaw
2016-12-0217:59:00
PRIOn knowledge base
www.prio-n.com
3
In BMC Patrol before 9.13.10.02, the binary “listguests64” is configured with the setuid bit. However, when executing it, it will look for a binary named “virsh” using the PATH environment variable. The “listguests64” program will then run “virsh” using root privileges. This allows local users to elevate their privileges to root.
| CPE | Name | Operator | Version |
|---|---|---|---|
| patrol | le | 9.13.10.01 |
Related
cve
cve
CVE-2016-9638
2016-12-02 17:59:00
nvd
nvd
CVE-2016-9638
2016-12-02 17:59:00
cvelist
cvelist
CVE-2016-9638
2016-12-02 17:00:00